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ENCRYPTION LEVEL INDICATOR CALCULATION METHOD 
AND COMPUTER PROGRAM 

BACKGROUND OF THE INVENTION 

The present invention relates to an encryption 
level indicator calculation method and a computer program. 
To put it in more detail, the present invention relates 
to an encryption level indicator calculation method for 
calculating an indicator for evaluating safety and level 
of a common-key block encryption method as well as 
relates to a computer program implementing the encryption 
level indicator calculation method. 

There is a variety of encryption processing 
algorithms, which can be roughly classified a public key 
encryption method and a common-key encryption method. The 
public key encryption method is an encryption method, 
which sets an encryption key and a decryption key as 
different keys such as a public key and a private key. On 
the other hand, the common-key encryption method is an 
encryption method, which sets an encryption key and a 
decryption key as a common key. 

There is also a variety of algorithms adopted in 
the common-key encryption method. An encryption method 
adopts one of the algorithms. In accordance with this 



encryption method, a plurality of keys is generated with 
a common key used as a base and the generated keys are 
used in carrying out an encryption process. As a method 
for generating the keys , a method using a round function 
is adopted. To put it in detail , in accordance with this 
key generation method, the round function is applied to a 
common key to generate a new key on the basis of the 
output value. Then, the round function is applied to the 
new key to generate another key. Subsequently, the round 
function is applied to the other key to generate a 
further key. Then, the round function is applied to the 
further key to generate a still further key. This 
procedure repeating the operation to generate a key 
results in a plurality of keys. A representative 
algorithm for generating a plurality of keys as described 
above is referred to as a common-key block encryption 
method . 

The common-key block encryption processing 
algorithm can be divided mainly into a round function 
part and a key-scheduling part. Conventionally, in order 
to secure safety against attacks related to a key or the 
like, an designer of encryption method is required to 
design a key-scheduling part with great caution in 
designing a common-key block encryption method so that a 



simple relation among round functions is not established. 

As an encryption method designed on the basis of 
such a guiding principle, Toshiba has proposed a cormnon- 
-key block encryption method called Hierocrypt. For 
details of the Hierocrypt common-key block encryption 
method, refers to, for example, a reference authored by K. 
Ohkuma et al . with a title of "The Block Cipher 
Hierocrypt," Selected Areas in Cryptography, LNCS 2012, 
pp. 72-88, 2000. The key-scheduling part of the 
Hierocrypt algorithm has a repetitive structure called a 
Feistel structure. A linear transformation part forming 
the right half of the Feistel structure tries an 
operation to avoid an attack related to a key by carrying 
out an XOR addition process on round-dependent constants . 

As a matter of fact, however, in the year of 2001, 
Furuya et al. discovered the fact that a linear relation 
among round keys is established. The fact that a linear 
relation among round keys is established was not expected 
by the creator of the Hierocypt algorithm. For details of 
the discovery made by Furuya et al . , refer to, for 
example, a reference authored by S. Furuya and V. Rijmen 
with a title of "Observations on Hierocrypt-3/Ll Key- 
scheduling Algorithms," Second NESSIE workshop, 2001. 

In accordance with a method developed by Furuya et 
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al . as described in the above reference, however, an 
equation expressing a linear relation among round keys is 
derived by combining algorithms of the key-scheduling 
part of the Hierocrypt method on a trial-and-error basis. 
Thus, there is no assurance that the discovered equations 
are all comprehended. In addition, with the trial-and- 
error basis, the difficulty in finding a relation 
equation increases in case the key scheduling becomes 
more complicated. 

SUMMARY OF THE INVENTION 

It is thus an object of the present invention 
addressing the problems described above to provide an 
encryption level indicator calculation method that is 
capable of comprehending all linear equations expressing 
relations among round keys in a common-key block 
encryption method without regard to the complexity of key 
scheduling, and capable of evaluating the encryption 
level of the common-key block encryption method on the 
basis of a discovered linear-relation equation, as well 
as provide a computer program implementing the encryption 
level indicator calculation method. 

In accordance with a first aspect of the present 
invention, there is provided an encryption level 



indicator calculation method based on an encryption 
processing algorithm and composed of: 

a step of setting a common key block encryption 
processing algorithm, which is to serve as the encryption 
processing algorithm to be used as the base of the 
encryption level indicator calculation method, has a key- 
scheduling part comprising a linear transformation part 
and a non-linear transformation part and includes: 

a sub-step of generating initial values Ui (where i 
=1,2 and so on) from a master key; 

a sub-step of calculating intermediate values Zi (0) 
(where i = 1, 2 and so on) from the initial values U± 
(where i = 1, 2 and so on) ; 

a plurality of sub-steps of calculating 
intermediate values Zi (r) (where i = 1, 2 and so on) from 
intermediate values Zi <r_1> (where i = 1, 2 and so on) ; 

a sub-step of calculating the non-linear 
transformation part outputs Vi <r> (where i = 1, 2 and so on 
and r = 1, 2 and so on) from the intermediate values Zi (r) 
(where i = 1, 2 and so on and r = 1, 2 and so on) and the 
initial values Ui (where i = 1, 2 and so on); and 

a sub-step of calculating round keys Ki <r> (where i 
=1,2 and so on and r = 1, 2 and so on) from the 
intermediate values Zi (r> (where i = 1, 2 and so on and r = 



1, 2 and so on) and the non-linear transformation part 
outputs Vi (r) (where i = 1, 2 and so on and r = 1, 2 and so 
on) ; 

a step of eliminating the intermediate values Zi (r> 
(where 1 = 1,2 and so on and r = 1, 2 and so on) serving 
as variables so that the round keys Ki <r) (where i = 1 , 2 
and so on and r = 1, 2 and so on) can be expressed as a 
linear combination of the initial values Ui (where i = 1, 
2 and so on) and the non-linear transformation part 
outputs Vi <r) (where i = 1, 2 and so on and r = 1, 2 and so 
on) ; 

a step of transforming the linear combination into 
a simultaneous linear equation completing transposition 
of terms and, thus, consisting of only terms of the 
initial values Ui (where i = 1, 2 and so on) and the non- 
linear transformation part outputs Vi (r> (where i = 1, 2 
and so on and r = 1, 2 and so on) on the right-hand side 
of the equation; 

a step of transforming the simultaneous linear 
equation into a matricial equation; 

a step of multiplying both the left-hand and right- 
hand sides of the matricial equation by a row-deform 
unitary matrix deforming a matrix on the right-hand side 
of the matricial equation obtained as a result of 



transformation into a step matrix from the left; 

a step of creating a new matrix consisting of 
lowest N rows of a matrix on the left-hand side of the 
matricial equation obtained as a result of transformation 
where N is a number obtained as a result of subtracting 
the rank value of the step matrix from the number of rows 
in the step matrix; and 

a step of finding N linear-relation equations by 
multiplying a column vector consisting of the round keys 
Ki (r) (where i = 1, 2 and so on and r - 1, 2 and so on) as 
elements by the new matrix generated at the preceding 
step, 
where : 

symbol U± (where i = 1, 2 and so on) denotes an 
initial value of the key-scheduling part; 

symbol Zi (r) (where i = 1, 2 and so on and r = 1, 2 
and so on) denotes an intermediate value of the key- 
scheduling part; 

symbol Vi (r) (where i = 1, 2 and so on and r = 1, 2 
and so on) denotes an output of the non-linear 
transformation part; and 

symbol Ki (r) (where i = 1, 2 and so on and r = 1, 2 
and so on) denotes a round key calculated from the 
intermediate values Zi (where i = 1, 2 and so on). 



In accordance with a second aspect of the present 
invention, there is provided a program to be executed as 
a computer program in carrying out an encryption level 
indicator calculation process based on an encryption 
processing algorithm and composed of: 

a step of setting a common key block encryption 
processing algorithm, which is to serve as the encryption 
processing algorithm to be used as the base of the 
encryption level indicator calculation method and 
includes : 

a sub-step of generating initial values U± (where i 
= 1, 2 and so on) from a master key; 

a sub-step of calculating intermediate values Zi <0> 
(where ±=1,2 and so on) from the initial values Ui 
(where i = 1 , 2 and so on) ; 

a plurality of sub-steps of calculating 
intermediate values Z± tr> (where i = 1, 2 and so on) from 
intermediate values Zi <r " 1> (where i = 1, 2 and so on) ; 

a sub-step of calculating the non-linear 
transformation part outputs Vi (r> (where i = 1, 2 and so on 
and r = 1, 2 and so on) from the intermediate values Zi <r> 
(where i = 1, 2 and so on and r = 1, 2 and so on) and the 
initial values Ui (where i = 1, 2 and so on) ; and 

a sub-step of calculating round keys Ki <r) (where i 
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= 1,2 and so on and r = 1, 2 and so on) from the 
intermediate values Zi (r) (where i = 1, 2 and so on and r = 
1, 2 and so on) and the non-linear transformation part 
outputs Vi <r> (where 1 = 1,2 and so on and r = 1, 2 and so 
on) ; 

a step of eliminating the intermediate values Zi (r) 
(where i = 1 , 2 and so on and r = 1 , 2 and so on) serving 
as variables so that the round keys Ki <r> (where i = 1, 2 
and so on and r = 1, 2 and so on) can be expressed as a 
linear combination of the initial values U± (where i = 1, 
2 and so on) and the non-linear transformation part 
outputs Vi (r> (where i = 1, 2 and so on and r = 1, 2 and so 
on) ; 

a step of transforming the linear combination into 
a simultaneous linear equation completing transposition 
of terms and, thus, consisting of only terms of the 
initial values Ui (where i = 1, 2 and so on) and the non- 
linear transformation part outputs Vi <r> (where i = 1, 2 
and so on and r = 1, 2 and so on) on the right-hand side 
of the equation; 

a step of transforming the simultaneous linear 
equation into a matricial equation; 

a step of multiplying both the left-hand and right- 
hand sides of the matricial equation by a row-deform 
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unitary matrix deforming a matrix on the right-hand side 
of the matricial equation obtained as a result of 
transformation into a step matrix from the left; 

a step of creating a new matrix consisting of 
lowest N rows of a matrix on the left-hand side of the 
matricial equation obtained as a result of transformation 
where N is a number obtained as a result of subtracting 
the rank value of the step matrix from the number of rows 
in the step matrix; and 

a step of finding N linear-relation equations by 
multiplying a column vector consisting of the round keys 
Ki <r> (where i = 1, 2 and so on and r = 1, 2 and so on) as 
elements by the new matrix generated at the preceding 
step, 
where : 

symbol U± (where i = 1, 2 and so on) denotes an 
initial value of the key-scheduling part; 

symbol Zi (r> (where i = 1, 2 and so on and r = 1, 2 
and so on) denotes an intermediate value of the key- 
scheduling part; 

symbol Vi <r> (where i = 1, 2 and so on and r = 1, 2 
and so on) denotes an output of the non-linear 
transformation part; and 

symbol Ki (r) (where i = 1, 2 and so on and r = 1, 2 



and so on) denotes a round key calculated from the 
intermediate values Z± (where i = 1, 2 and so on) . 

In accordance with the configuration of the present 
invention, it is possible to comprehend all equations 
expressing relations among round keys in a common-key 
block encryption method without regard to the complexity 
of key scheduling and evaluate the encryption level of 
the common-key block encryption method on the basis of a 
discovered linear-relation equation . 

In addition, in accordance with the configuration 
of the present invention, by expressing the key- 
scheduling part algorithm, which is one of encryption 
processing algorithms, in terms of equations represented 
by vectors and a matrix and by eliminating non-linear 
transformation output values and initial values from the 
matrix-based equation through use of unitary 
transformation, it is possible to find all linear- 
relation equations expressing relations among round keys. 

It is to be noted that the computer program 
provided by the present invention is a computer program 
that can be presented to for example a general-purpose 
computer system, which is capable of executing various 
kinds of program code, by being recorded on a recording 
medium in a computer-readable form or by way of 
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communication media such as a network also in a computer- 
readable form. Examples of the recording medium are a CD, 
an FD and an MO disc. Since the computer program is 
presented to the computer system in a computer-readable 
form, the computer system is capable of carrying out a 
process according to the program. 

The other objects, characteristics and merits of 
the present invention will probably become apparent from 
later detailed explanations of embodiments of the present 
invention with reference to diagrams. It is to be noted 
that the technical term 'system 7 used in this 
specification means a logical group configuration of a 
plurality of apparatus, which is not necessarily put in 
the same case. 

BRIEF DESCRIPTION OF THE DRAWING 

Fig. 1 shows a flowchart referred to in explanation 
of an encryption level indicator calculation procedure 
according to the present invention. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The encryption level indicator calculation method 
provided by the present invention is explained in detail 
as follows. First of all, an outline of a procedure of an 
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encryption level indicator calculation process is 
explained by referring to a flowchart shown in Fig. 1. 
After that, embodiments implementing the encryption level 
indicator calculation process provided by the present 
invention are described by giving a plurality of concrete 
common-key block encryption processing algorithms as 
examples . 

[Outline of the Encryption level Indicator Calculation 
Process] 

Fig. 1 shows a flowchart representing the 
encryption level indicator calculation process provided 
by the present invention. An outline of each processing 
step in the flowchart is explained as follows. 

The flowchart begins with a step S101 to set an 
encryption processing algorithm to be used as the base of 
the encryption level indicator calculation method. In 
this case, the encryption processing algorithm to be used 
as the base of the encryption level indicator calculation 
method is a common key block encryption processing 
algorithm. 

To put it concretely, as the encryption processing 
algorithm to be used as the base of the encryption level 
indicator calculation method, the processing at this step 



S101 sets a common key block encryption processing 
algorithm including a key-scheduling part, which 
comprises a linear conversion part and a non-linear 
transformation part, and having: 

a step of generating initial values Ui (where i = 1, 
2 and so on) from a master key; 

a step of calculating intermediate values Zi (0) 
(where i = 1, 2 and so on) from the initial values Ui 
(where i = 1, 2 and so on); 

a plurality of steps of calculating intermediate 
values Zi*^ (where i = 1, 2 and so on) from intermediate 
values Zi (r " 1} (where i = 1, 2 and so on); 

a step of calculating the non-linear transformation 
part outputs Vi (r) (where i = l f 2 and so on and r = 1, 2 
and so on) from the intermediate values Zi <r) (where i = 1, 
2 and so on and r — 1, 2 and so on) and the initial 
values Ui (where i = 1 , 2 and so on) ; and 

a step of calculating round keys Ki (r) (where i = 1, 
2 and so on and r = 1, 2 and so on) from the intermediate 
values Zi (r) (where i = 1, 2 and so on and r = 1, 2 and so 
on) and the non-linear transformation part outputs Vi <r> 
(where i = 1, 2 and so on and r = 1, 2 and so on) , 
where : 

symbol Ui (where i = 1, 2 and so on) denotes an 
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initial value of the key-scheduling part; 

symbol Zi (r) (where 1 = 1,2 and so on and r = 1, 2 
and so on) denotes an intermediate values of the key- 
scheduling part; 

symbol Vi (r) (where 1 = 1,2 and so on and r = 1, 2 
and so on) denotes an output of the non-linear 
transformation part; and 

symbol Ki (r) (where i = 1, 2 and so on and r = 1, 2 
and so on) denotes a round key calculated from the 
intermediate values Zi (where i = 1, 2 and so on) . 

Then, at the next step S102, intermediate variables 
of the common-key block encryption processing algorithm 
set at the step S101 are eliminated. To put it concretely, 
the processing carried out at the step S102 eliminates 
the intermediate values Zj_ <r) (where i = 1, 2 and so on and 
r = 1, 2 and so on) so that the round keys Ki (r) (where i = 
1, 2 and so on and r - 1 , 2 and so on) can be expressed 
as a linear combination of the initial values Ui (where i 
=1,2 and so on) and the non-linear transformation part 
outputs Vi (r) (where i = 1, 2 and so on and r = 1, 2 and so 
on) . The concrete example of the processing will be 
described later. 

Then, at the next step S103, a variable 
transposition process is carried out. To put it 



concretely, the processing carried out at the step S103 
transforms the expression of the linear combination into 
a simultaneous linear equation completing transposition 
of terms and, thus, consisting of only terms of the 
initial values Ui (where i = 1, 2 and so on) and the non- 
linear transformation part outputs Vi (r> (where i = 1, 2 
and so on and r - 1, 2 and so on) . The concrete example 
of the processing will be described later. 

Then, at the next step S104, a matricial-equation 
transformation process is carried out. The matricial- 
equation transformation process is a process to transform 
the simultaneous linear equation into a matricial 
equation. The matricial-equation transformation process 
will be explained in concrete terms later. 

Then, at the next step S105, a unitary 
transformation process is carried out. To put it in 
detail, both the left-hand and right-hand sides of the 
matricial equation are multiplied by a row-deform unitary 
matrix deforming a matrix on the right-hand side of the 
matricial equation obtained as a result of transformation 
into a step matrix from the left. An embodiment of the 
unitary transformation process will be described later. 

Then, at the next step S106, a small-matrix 
selection process is carried out. To put it in detail, 
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the small-matrix selection process is a process to create 
a new matrix consisting of lowest N rows of a matrix on 
the left-hand side of the matricial equation obtained as 
a result of transformation where N is a number obtained 
as a result of subtracting the rank value of the step 
matrix from the number of rows in the step matrix. An 
embodiment of the small-matrix selection process will be 
described later. 

Then, at the next step S107, a linear-relation 
equation generation process is carried out. To put it in 
detail, the linear-relation equation generation process 
is a process to find N linear-relation equations by 
multiplying a column vector consisting of the round keys 
Ki (r) (where i = 1, 2 and so on and r = 1, 2 and so on) as 
elements by the new matrix generated at the preceding 
step S106. An embodiment of the linear-relation equation 
generation process will be described later. 

The number (N) of linear-relation equations found 
in the process carried out at the step S107 is the 
encryption level indicator of the common-key block 
encryption algorithm set at the step S101. The processing 
represented by the flowchart described above is executed 
as a process to find the value of N , which is number of 
linear- relation equations comprehensively including 



equations representing linear relations among round keys 
of the common-key block encryption algorithm set at the 
step S101. The larger the number (N) of linear-relation 
equations, the smaller the encryption level. Conversely 
speaking, the smaller the number (N) of linear-relation 
equations, the larger the encryption level. Thus, the 
number (N) of linear-relation equations found by carrying 
out the processing represented by the flowchart shown in 
Fig. 1 can be used as the encryption level indicator of 
the common-key block encryption algorithm. 

In accordance with the processing according to the 
processing procedure represented by the flowchart shown 
in Fig. 1, the key-scheduling part algorithm, which is 
one of encryption algorithms , is expressed by a matricial 
equation represented by vectors and a matrix. By 
eliminating non-linear transformation output values and 
initial values from the matricial equation through a 
unitary transformation process, all equations of linear 
relations among round keys can be found. 

[First Embodiment of Encryption level Indicator 
Calculation Process] 

As a first embodiment of the encryption level 
indicator calculation process provided by the present 
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invention, a typical process of applying an encryption 
level evaluation method provided by the present invention 
to 1 Hierocrypt-Ll ' is explained in detail, 1 Hierocrypt- 
Ll ' is the name of a block encryption process proposed by 
Toshiba. The 'Hierocrypt-Ll' block encryption process is 
a common-key block encryption process with a block length 
of 64 bits and a key length of 128 bits. 

First of all, the step S101 of the flowchart shown 
in Fig. 1 is explained. As described earlier, at this 
step, an encryption processing algorithm is set. This 
step is executed as a process to set the * Hierocrypt-Ll ' 
block encryption algorithm proposed by Toshiba. 

Let symbol On denote a null matrix consisting of n 
rows and n columns whereas symbol In denote a unit matrix 
consisting of n rows and n columns. In this case, a 
matrix P16 is defined as follows: 
[formula 1] 

f 12 02 12 02 > 

P16= 02 '2 02 12 
02 12 12 12 
K 12 02 12 12 J 

Let symbol P16I denote the inverse matrix of the 
matrix P16. Next, matrices M5 and MB are defined as 
follows : 
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[formula 2] 



/ 1 0 1 0 \ 



Mb = 



110 1 
1110 



\ 0 1 0 1 / 
/ 0 1 0 1 \ 



MB = 



10 10 
110 1 



VI 0 1 1J 



Then, matrices M5B and MBS are defined, being 
expressed in terms of the matrices M5 and MB as follows: 
[formula 3] 



Next, round dependent constant vectors Gi (where i 
- 0, 7) are defined as follows: 

[formula 4] 



GO 




(hOl, 


h02, 


h03, 


h04, 


0, 


0, 


o, 


0) 


Gl 




(hll, 


hl2, 


hl3, 


hl4. 


0, 


o, 


o, 


0) 


G2 




<h21, 


h22, 


h23, 


h24, 


0, 


o, 


o, 


0) 


G3 




(h31, 


h32, 


h33, 


h34, 


0, 


o, 


o, 


0) 


G4 




(h41, 


h42, 


h43 , 


h44, 


0, 


o. 


o. 


0) 


G5 




(h41, 


h42 , 


h43 , 


h44. 


0, 


o, 


o, 


0) 


G6 




(h31. 


h32, 


h33, 


h34. 


0, 


o. 


o. 


0) 




G7 = (h21, h22, h23, h24, 0, 0, 0, 0) 

It is to be noted that a vector HH with constants 

in the above equations used as elements is defined as 

follows : 

[formula 5] 

HH = (hOl, h02, h03, h04, hll, hl2, hl3, hl4, h21, h22 , 
h23, h24, h31, h32, h33, h34, h41, h42, h43, h44,) 

The actual values of the elements hOl, h02 , ••• and 
h44 are defined as follows, 
[formula 6] 

(hOl, hOl, h02, h03) = (0x5a, 0x82, 0x79, 0x99) 
(hll, hll, hl2, hl3) = (0x6e, 0xd9 , Oxeb, Oxal) 
(h21, h21, h22, h23) = (0x8f, 0x1b, Oxbc, Oxdc) 
(h31, h31, h32, h33) = (Oxca, 0x62, Oxcl, 0xd6) 
(h41, h42, h43, h44) = (0xf7, Oxde, 0xf5, 0x8a) 
Next, a vector ZZ with its elements composing the 
right half of a sequence of initial values of the key- 
scheduling part is defined as follows, 
[formula 7] 

ZZ = (z31, z32, z33, z34, z41, z42, z43, z44) 
By using these, the right half of the key- 
scheduling part in the Hierocrypt-Ll common-key 
encryption algorithm is expressed below. It is to be 
noted that the operator + used in the following 



expressions is an additive operator in the Galois field 
GF(2) . 
[formula 8] 



zo 


- 


M5B*ZZ + GO 


wo 


= 


P16*Z0 


Zl 


= 


M5B*W0 + Gl 


Wl 


= 


P16*Z1 


Z2 


= 


M5B*W1 + G2 


W2 


= 


P16*Z2 


Z3 


= 


M5B*W2 + G4 


W3 




P16*Z3 


Z4 




M5B*W3 + G4 


W5 




M5B* (Z4 + G5) 


Z5 




P16I*W5 


W6 




M5B* (Z5 + G6) 


Z6 




P16I*W6 


W7 




M5B* (Z6 + G7) 


Z7 




P16I*W7 



Symbols ZO, Zl, Z2 , Z3, Z4, Z5, Z6, Z7, WO, Wl , W2 , 
W3 , W5 , W6 and W7 used in the above equations form the 
right half of the sequence of intermediate values of the 
key-scheduling part. 

Next, these intermediate values are expressed by 
being split in accordance with the following equations . 
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[formula 9] 

Zn = Zn 3 II ZN 4 
Wn = Wni I I WN 2 

Symbol I I used in the above equations denotes a 
concatenation of vectors . 

Next, let non-linear transformation part outputs of 
rounds be VO , VI, V2 , V3 , V4 , V5 , V6 and V7 . Each of the 
outputs is a vector consisting of four elements as 
follows . 
[formula 10] 



VO = 


(vOl, 


v02, 


v03, 


v04) 


VI = 


(vll. 


vl2 , 


vl3, 


vl4) 


V2 = 


(v21, 


v22, 


v23, 


v24) 


V3 = 


(v31, 


v32 , 


v33, 


v34) 


V4 = 


(v41, 


v42, 


v43, 


v44) 


V5 = 


(v51, 


v52, 


v53, 


v54) 


V6 = 


(v61, 


v62, 


v63, 


v64) 


V7 = 


(v71, 


v72, 


v73, 


v74) 


Here , 


vectors Zi 


and 


Z 2 are 



[formula 11] 

Zi = (zll, zl2, zl3, zl4) 
Z 2 - (z21, z22, z23, z24) 

With the vectors Zi and Z 2 set as described above, 
the left half of the key-scheduling part in the 
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Hierocrypt-Ll common-key encryption algorithm is 
expressed as follows, 
[formula 12] 



ZOi 


= 


z 2 






Z0 2 


= 


Zi + 


VO 


Zli 


= 


Z0 2 






Zl 2 


= 


ZOi 


+ 


VI 


Z2x 


= 


Zl 2 






Z2 2 


= 


Zli 


+ 


V2 


Z3i 


= 


Z2 2 






Z3 2 


= 


Z2i 


+ 


V3 


Z4i 




Z3 2 






Z4 2 




Z3i 


+ 


V4 


Z5i 




Z4 2 


+ 


V5 


Z5 2 




Z4i 






Z61 




Z5 2 


+ 


V6 


Z6 2 




Z5i 






Z7i 




Z5 2 


+ 


V7 


Z7 2 




Z61 







Symbols ZOi, Z0 2 , Zli, Zl 2 , Z2i, Z2 2 , Z3i, Z3 2 , Z 
Z4 2/ Z5i, Z5 2 , Z6 if Z6 2/ Z7 X and Z7 2 used in the above 
equations form the left half of the sequence of 
intermediate values of the key-scheduling part. 

By using the intermediate values obtained as 



described above, round keys Kli, Kl 2 , Kl 3/ KI4, K2i, 
K7i and K7 2 are expressed as follows: 
[formula 13] 



Kli 


= 


ZOi 


+ 


VI 


Kl 2 


= 


Zl 3 


+ 


VI 


Kl 3 


= 


Zl 4 


+ 


VI 


Kl 4 


= 


Z0 2 


+ 


zl 4 


K2x 


= 


Zli 


+ 


V2 


K2 2 


= 


Z2 3 


+ 


V2 


K2 3 


= 


Z2 4 


+ 


V2 


K2 4 


= 


Zl 2 


+ 


Z2 4 


K3i 


= 


Z2i 


+ 


V3 


K3 2 


= 


Z3 3 


+ 


V3 


K3 3 


= 


Z3 4 


+ 


V3 


K3 4 


= 


Z2 2 


+ 


Z3 4 


K4 X 


= 


Z3i 


+ 


V4 


K4 2 




Z4 3 


+ 


V4 


K4 3 




Z4 4 


+ 


V4 


K5i 




Z5i 


+ 


Z4 3 


K5 2 




W5 X 


+ 


V5 


K5 3 




W5 2 


+ 


V5 


K5 4 




Z4i 


+ 


W5 2 


K61 




Z61 


+ 


Z5 3 


K6 2 




W61 


+ 


V6 



K6 3 = W6 2 + V6 
K6 4 = Z5i + W6 2 
K7i = Z7i + Z63 
K7 2 = W7i + V7 
K7 3 = W7 2 + V7 
K7 4 = Z61 + W7 2 

It is to be noted that symbols Kli, Kl 2/ Kl 3 , Kl 4 , 
K2i, K7i and K7 2 each denote a vector consisting of 

four elements. 

The following description explains the step S102 of 
carrying out a process to eliminate intermediate 
variables in the processing represented by the flowchart 
shown in Fig. 1. If the four elements of each of the 

vectors. Kli, Kl 2/ Kl 3 , Kl 4 , K2i, K7i and K7 2 are 

expressed by their actual values, the vectors Kli, Kl 2 , 
Kl 3/ Kl 4/ K2i, K7i and K7 2 can be expressed as follows: 

[formula 14] 
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KU = 



KU = 



KU = 



KU = 



1C2i = 



K2 2 = 



K2 3 = 



K2 A = 



/ vll + 221 \ 
t/12 + 222 
vl3 + 223 
k vl4 + 224 / 

t hOl + W1 + /i03 + i/ll + 232 + 241 
hOl + Ji02 + hl2 + MM 4- v!2 + 233 + 242 
/iOl + M)2 + /jl03 + hl3 + t/13 + 231 + 234 + 243 
^ /rt)2 + /i04+M4 + T/14 + 231 + 244 

( h02 + h04 + vll+231 \ 
/i01 + M)3 + vl2 + 232 
h02 + h03 + M)4 + t/13 + 232 + 241 + 233 
^ AOl + hW2 + h03 + 1/14 + 231 + 234 + 244 ; 

f M)2 + MM + vOl + 2ll + 231 
hOl + h03 + t/02 + 212 + 232 
k02 + M)3 + MM + 1/03 + 213 + 232 + 241 + 233 
^ M)l + h02 + M)3 + i/04 + 231 + 214 + 234 + 244 j 

( v01 + v21 + 2ll \ 
v02 + t/22 + 212 
v03 + t/23 + 213 
^ v04 + t/24 + 2l4 j 

f M)2+ /ill + M)3 + /i21 + hl3 + v21 + 233 + 234 + 243 
Ml + M)3 + hl2 + MM + h22 + /il4 + t/22 + 231 + 241 + 233 + 242 + 234 
/ill + 7*12 + h04 + hl3 + /i23 + t/23 + 232 + 242 + 234 + 243 

^ hOl + M)2 + hl2 + hU + fc24 + v24 + 232 + 233 + 242 + 234 

f hOl + H12 + hl4 + t/21 + 231 + 233 + 242 + 244 
/i02 + hll + /*13 + v22 + z31 + 232 + 241 + 234 + 243 
h02 + hl2 + M3 + H14 + v23 + 231 + 232 + 241 + 242 + 234 + 243 + 244 

^ A01 + /i02 + /ill + /il2+/i04 + M3 + «24+241 + 233 + 242 + 243 + 244 J 

f W}l + /il2 + M4 + ull + 221 + 231 + 233 + 242 + 244 
h02 + hi 1 + h\3 + vl2 + 222 + 231 + 232 + 241 + 234 + 243 
M)2 + hl2 + hl3 + hl4 + t/13 + 231 + 223 + 232 + 241 + 242 + 234 + 243 + 244 

^ hOl + M)2 + Jill + h\2 + MM + h!3 + t/14 + 241 + 224 + 233 + 242 + 243 + 244 
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K3x = 



K3 2 = 



A~3 3 = 



fc4! = 



k4 2 = 



fc4 3 = 



/ vll4-v3l4-z21 \ 
ul2 4- t/32 4- 2:22 
vl3 + v33 4- z23 
^ vl4 4v34+z24 j 

f /i01 + /i03 + hl2 4/i214/i04 4/il3 + ;i31 + /i23 4t>3l4z4l4 z424z34 4 z43 ^ 
/i01 4 7i21 4 M3 + h22 4 fcl4 4 k32 4- /i24 4 v32 4- z3l 4 241 4- z33 4- z43 
W)l 4 h02 + /i21 4- /i22 4 hl4 + /i23 4- h33 4 v33 4- z32 4 241 + z33 4 z34 
x /i024m4/*03 4M2 4/i22 4-/i24 4-/i344t>344^ / 

f hOl 4 /i02 4 /il 1 4 /i03 + h04 4 /i22 4 /i24 4 «31 + z31 4 z32 4 z41 
h02 4 h03 4 M2 4 h2l 4 hi)4 4 fc23 4 r32 4 z32 4 z33 4 242 
h03 4 /*12 4 h22 4 /i23 4 /i24 4 v33 4 z31 4 z32 4- z33 4 z42 

hOl 4 h02 + /il2 + /i21 4- /t04 4 /i22 + M4 4- /t23 + v34 4- z41 4 z33 4- z42 + z44 j 

f hOl 4 h02 + hll 4 h03 4 h04 4 h22 4- h24 4 vOl 4 1;21 4 zll + z31 + z32 4 z41 
h02 4 fc03 + hl2 4 /*21 4 A04 4 /i23 + t/02 4 v22 + zl2 4 z32 4 z33 4- z42 
h03 4 hl2 4 /*22 4 /i23 4 /t24 4 v03 4 v23 4 zl3 + z31 4 z32 4 z33 4 z42 
hOl + h02 + hll + Ail2 + ^21 + fe04 + /i22 + M4 + h23 + v04 + i;24 + zl4 + z41 + z33 

V 4-z42 + z44 

/ tK)l+v2H-v41 + zll \ 
v02 + t;22 -h v42 + zl2 
v03 + v23 + v43 + zl3 
^ v04 + v24 + v44 -h zl4 j 

f /i01-hMl + /i03-f/tl3 + /i22 + /jt31 + M4 4-^23+/i41 + /*33 -f v41 + z32 + z41 + z43 \ 
hi 1 + Ji31 + h23 + H32 + h24 + h42 + Ji34 + «42 + z41 
A02 + All 4- ^12 + h04 + h3l -h h32 + h24 + /i33 + M3 + v43 + z31 + z42 
h02 + 7il2 4- h21 + /il3 + /i22 4- h32 + /i34 H- ft44 + v44 -f z31 + z32 4- z41 4- z42 4- z34 

V 4-243 

f ^D14- /i02 4-/iH4-/i03 4-/il2 4-h2l4-Ail3 4-hl4+ Ji32 + h34 4- v41 4- z31 4- 242 4- z34 ^ 
4-z43 4- z44 

hJ02 4- h03 4- hl2 4- /i04 4- /il3 4- h22 -h h31 4- hl4 4- Ai33 4- 1;42 + z32 4- z33 + z42 4- z43 
hOl 4- hJ02 4- /i03 + h04 4- /il3 4- /i22 4- hS2 4- h33 4- fc34 + 1;43 4- z31 4- z32 + z43 4- z44 
h02 + hll 4- M2 4- h2l 4- W)4 4- /*22 4- h3l 4- /il4 4- /i32 4- A24 4- W3 4- t>44 + z31 4- z42 
4-244 
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*4 4 = 



K5i = 



K5 2 = 



A*5 3 = 



JT6i = 



f M>1 + h02 + /ill + /i03 + M2 + h21 + M3 + M4 + /i32 + h34 + vll + v31 4- 221 + 231 > 
+242 + 234 + 243 + z44 

hSn + /i03 + M2 + /i04 + M3 + h22 + /i31 + M4 + hZ3 + «12 + t;32 + z22 + 232 + 233 
+242 + 243 

hOl + /i02 + h03 + h04 + M3 + fc22 + /i32 + /*33 + /i34 + t>13 + u33 + z31 + 223 + 232 
+243 + 244 

h02 + /ill + M2 + A21 + h04 + /i22 + /i31 + M4 + /i32 + h24 + A33 + vl4 + v34 + 231 
^ +224 + 242 + 244 

f hQl + Ml + h03 + M3 + h22 + hZ\ + /il4 + h23 + Ml + h33 + vOl + v21 + i>41 + v51 \ 
+211+232 + 241 + 243 

M 1 + /i31 + /i23 + h32 + /i24 + fc42 + /i34 + v02 + v22 + 1;42 + vS2 + 212 + 24 1 
hJ02 + /ill + M2 + /i04 + /i31 + /i32 + /i24 + /i33 + /i43 + t;03 + u23 + u43 + v53 + 213 
+231 + 242 

/t02 + M2 + /i21 + M3 + /i22 + h32 + /i34 + /i44 + 1/04 + v24 + u44 + 231 + w54 + 2 14 
V +232 + 241 + 242 + 234 + 243 

? />.02 + /ill + /il2 + /),21 + /il3 + /i22 + /i31 + /i23 + /i24 + r51 + 231 + 232 + 242 + 234 > 
+243 

hOl + h02 + hO'S + h\2 + /i04 + /il3 + /i22 + M4 + /i23 + h32 + /i24 + v52 + 231 + 232 
+241+242 + 243 

hOl + M)2 + W)3 + M2 + h21 + /il4 + A24 + h33 + v53 + 231 + z41 + z42 + 234 
^ hOl + /i03 + H21 + h04 + M4 + /i23 + /i24 + /i34 + v54 + z34 

f Ml + M2 + /i21 + /i04 + /i22 + M4 + /i33 + t/51 + 232 + 242 + 234 
hOl + /i02 + /il2 + hU + /i24 + h34 + v52 + 232 + 233 + 242 + 234 
h02 + Ml + /i03 + h2l + M3 + /i31 + v53 + z33 + z34 + 243 
Ml + h03 + /),21 + M3 + h32 + /i24 + 231 + v54 + 232 + 233 + 243 + 244 j 

f hll + M2 + h2l + /i04 + h22 + /il4 + /i33 + vll + v31 + 221 + 232 + 242 + 234 
hOl + /i02 + M2+ M4 + /i24 + /i34 + vl2 + v32 + z22 + 232 + 233 + z42 + 234 
hi)2 + Ml + hU3 + /i21 + M3 + /i31 + vl3 + v33 + z23 + 233 + z34 + z43 

^ Ml + h03 + h2l + hl3 + h32 + h24 + vl4 + v34 + z31 + 232 + 224 + 233 + 243 + 244 j 

f hOl + h03 + hl2 + h2l + h04 + hl3 + /i31 + h23 + vll + t-31 + v61 + z21 + 241 + 242 > 
+234 + 243 

M)l + h2l + M3 + h22 + M4 + Ji32 + fi24 + vl2 + u32 + v62 + 222 + 231 + 241 + 233 
+243 

hOl + h02 + h2l + h22 + hl4 + h23 + /i33 + vl3 + 1;33 + v63 + 223 + z32 + 241 + z33 
+234 

/i02 + Ml + /i03 + /il2 + h22 + /i24 + /i34 + vl4 + v34 + 241 + u64 + z24 + 233 + 242 
^ +234 + 244 
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KG? = 



K63 = 



K64 = 



K7 X = 



/C7 2 = 



/ /t01 + /i02+/ill + 
Zi02 + /i03+/il2 + 
h02 + /ill + M)4 + 
^ /ill + /i04 + /*13 + 

/ M)l + /i02 + /ill + 
h02 + /i04 + /il4 + 
ZiOl + /ill + /i03 + 
/>01 + /rtl + /i03 + 

/rf)l + /i02+/ai + 
h02 + /i04 + M4 + 
/*01 + /ill + /i03 + 
/i01 + /ill + /i03 + 

/ /i02 + /*ll + /i03 + 
/ill + M)3+/il2 + 
+233 + z42 + ^34 
hll + /il2 + /il)4 + 
+243 

/i01 + h02 + /*12 + 
V +234 

( m\ + M)2 + Ml + 
M)2 + /i03+/U2 + 
ZiOl + /i04 + /»13 + 
Zi01 + /i03+/i04 + 



/i03 + /il2 + /i21 + hl3 + /il4 + v61 + z31 + 242 + 234 + 243 + 244 ^ 
/t04 + /tl3 + /i22 + /tl4 + v62 + 232 + 233 + 242 + 243 1 
M4 + /i23 + 231 + 1;63 + z41 + z44 
h\4 + h24 + 232 + 241 + v64 + 234 + 243 + 244 

M2 + h04 + h23 + v6l + 241 + 233 + 242 ^ 
Zi24 + v62 + 231 + 244 
h21 + v63 + 232 + 241 

ft22 + hl4 + 232 + 241 + v64 + z44 / 

/il2 + h04 + /t23 + vOl + v21 + v41 + v51 + 2II + 241 + z33 + 242 > 
h24 + v02 + v22 + v42 + v52 + zl2 + 231 + 244 
h2l + v03 + v23 + v43 + v53 + 213 + 232 + 241 
/i22 + /il4 + v04 + v24 + v44 + t/54 + 2 14 + 232 + 241 + 244 

/i21 + hl3 + vOl + «21 + v41 + t;51 + 2II + t;71 + 233 + z34 + 243 \ 
h04 + h22 + hl4 + vQ2 + t/22 + v42 + v52 + 212 + 231 + v72 + 241 

ha + h23 + v03 + w23 + v43 + t)53 + 213 + 232 + v73 + z42 + 234 

M4 + h24 + v04 + v24 + r44 + v54 + zl4 + 232 + 233 + z42 + v74 



hOS + h04 + t;71 + 231 + 232 + z41 
h04 + v72 + 232 + 233 + 242 
231 + 232 + 241 + v73 + 233 + z34 + 243 
hl4 + u74 + 234 



Then, the next step S103 is executed to carry out a 
variable transposition process. With the results of the 
vectors Kli, Kl 2 , Kl 3 , Kl 4 , K2 if K7 X and K7 2 used as a 

base, the simultaneous linear equation is transformed so 
as to result in equations, which each include only terms 
zxx and vxx on the right-hand side thereof as follows, 
[formula 15] 
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fcln = ull4-z21 
feli2 = vl2 + z22 
kl 13 = ul3 4-z23 
A:li4 = U14 + 224 

hOl 4- hll 4- h03 + *l 2 i = t/11 + z32 4- 2:41 

/i01 + h02 4- A12 4- h04 4- fcl 22 = ul2 + z33 4- z42 

hOl + h02 4- /t03 4- /il3 + fcl^ = «13 + z31 4- *34 4- z43 

h02 -h /i04 + A14 + A;l 24 = vl4 + z31 + z44 

/i02 4- MM 4- A1 3X = vll 4- z31 

/i01 4- hU3 + kl 32 = vl2 + z32 

h02 4- fc03 + hOA 4- fcl33 = vl3 4* z32 4- z41 4- z33 

hOl 4- M)2 4- /i03 4- Arl 34 = vl4 + z31 + z34 + z44 

h02 4- M4 + *1 41 = vOl 4- zll + z31 
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hOl + /i03 + fcl 42 = v02 +212+ z32 

M)2 + h03 + W)4 + fcl43 = v03 + zl3 + z32 + z41 + z33 

hOl + /i02 + h03 + fcl44 = v04 + z3l + zl4 + z34 + z44 

fc2 n = wOl + v21 +zll 

A:2i2 = v02 + v22 + zl2 

A?2i 3 = v03 + v23 + z!3 

fc2i 4 = v04 + v24 + zl4 

h02 + fill + h03 + h21 + hl3 + k2 2 i = v21 + z33 + z34 + z43 
Zill+/i03 + /il2+/i04+/i22+/il4+fc222 = "22+z31 + z41+z33+z42+z34 
hll + /il2 + /i04 + /il3 + /*23 + k2 2 3 = x>23 + z32 + z42 + z34 + z43 
hOl + h02 + M2 + /*14 + /i24 + *2 24 = v24 + z32 + z33 + z42 + z34 
hOl + hl2 + M4 + fc2 3 i = v21 + z31 + z33 + z42 + z44 
h02 + hll + hl3 + fc2 32 = v22 + z31 + z32 + z41 + z34 + z43 
M)2+/il2+/il3+/il4+A:233 = v23+z31+z32 + *41+z42+z34+z43 + z44 
M)l+/i02 + /ill + M2+/i04+/il3+fc2 34 = v24 + z41+z33+z42 + z43+z44 
hOl + hl2 + hlA + Jb2 41 = vll + z21 + z31 + z33 + z42 + z44 
h02 + hll + H13 + ib2 42 = t;12 + z22 + z31 + z32 + z41 + z34 + z43 
h02 + hl2 + hl3 + M4 + ^43 = vl3 + z31 + z23 + z32 + z41 + z42 + z34 + 
z43 + z44 

hOl + /i02 + hi 1 + M2 + hl)4 + M 3 + k2<u = vlA + z41 + z24 + z33 + z42 + 
z43 + z44 

fc3 u = vll + v31+z21 
fc3i2 = vl2 + v32 + z22 
fc3 13 = vl3 + v33 + z23 
fc3 14 == t/14 + v34 + z24 

hOl + h03 + hl2 + h21 + hJ04 + hl3 + h31 + /*23 + *3 2 i = v31 + z41 + 
z42 + z34 + z43 

/i01+h21 + M3+/i22+/il4+/i32+h24+A:322 = t;32+z31+z41+z33+z43 
Zi01+/i02+/i21+/i22+/*14+/i23+/i33+A:3 23 = v33+z32+z41 + z33+z34 
h02 + hll + h03 + /il2 + h22 + h24 + ti$4 + fc3 24 = v34 + z41 + z33 + 
z42 + z34 + z44 

hOl + h02 + hll + M)3 + h04 + /i22 + h24 + fc3 3i = v31 + z31 + z32 + z41 
h02 + /i03 + h!2 + Ji21 + hQ4 + /i23 + Jfc3 32 = v32 + z32 + z33 + z42 
hQ3 + hl2 + h22 + h23 + Ji24 + ^33 = v33 + z31 + z32 + z33 + z42 
hOl + hQ2 + hll + hl2 + h2l + h04 + h22 + A14 + h23 + = r34 + 

z41 + z33 + z42 + z44 

hOl + /i02 + /ill + h03 + /i04 + h22 + h24 + Jb3 4 i = vOl + u21 + zll + 

z31 + z32 + z41 

Zi02+h03+hl2+h21+M)4+/i23+fc3 4 2 = iX)2+v22+2l2 + z32+z33+z42 



32 



M)3+hl2+h22+/i23 + h24+fc3 43 = v03+x/23 + 213+23 1+232 +233 + z42 
hQl + h02 + hll + M2 + fc21 + /i04 + h22 + £14 + h23 + Jfc3 44 = t>04 + 
t;24 + zU + 241 + z33 + z42 + z44 
k4i i = vQl + u21 + v41 + 2ll 
Jfc4i2 = v02 + v22 + v42 + 212 
fc4i3 = u03 + u23 + v43 + 2 13 
Jk4i4 = t'04 + v24 + v44 + 214 

hQl + hll + W)3 + M3 + 7i22 + h31 + hl4 + H23 + fc41 + fc33 + Jk4 21 = 
w41 + 232 + 241 + 243 

hll + h31 + /i23 + fc32 + /z24 + /i42 + /*34 + A4 22 = v42 + 241 

Zi02+/ill+/il2+/i04+/i31+/i32+ft24+/i33+/i43+A:423 = v43+231+242 

h02 + ftl2 + h21 + M3 + h22 + H32 + /i34 + hU + fc4 24 = t;44 + 231 + 
232 + 241 + 242 + 234 + 243 

hOl + h02 + fcll + h03 + M2 + h21 + /il3 + /il4 + h32 + h34 + &4 31 = 
u41 + 231 + 242 + 234 + 243 + 244 

h02 + hQ3 + hl2 + /i04 + hl3 + h22 + h31 + M4 + Ji33 + *4 32 = «42 + 
232 + 233 + 242 + 243 

hQl + h02 + hQ3 + M)4 + /il3 + fc22 + /i32 + fc33 + /i34 + fc4 33 = v43 + 
231 + 232 + 243 + 244 

/i02 + Ml + hl2 + h21 + ^04 + /i22 + h31 + W4 + h32 + h24 + h33 + A:43 4 = 
v44 + 231 + 242 + 244 

hQl + h02 + hll + /i03 + 7il2 + /i21 + hlZ + /*14 + h32 + + *4 41 = 
vll + v31 + 221 + 231 + 242 + 234 + 243 + 244 

h02 + h03 + hl2 + h04 + M3 + h22 + h31 + M4 + fc33 + Ar4 42 = vl2 + 
v32 + 222 + 232 + 233 + 242 + 243 

hQl + hQ2 + hQ3 + hQ4 + /il3 + /i22 + h32 + h33 + /i34 + ^43 = vl3 + 
t»33 + 231 + 223 + 232 + 243 + 244 

Zi02 + Ml + /il2 + /i21 + ^04 + /i22+Wl + M4 + A32 + /i24 + fe33 + Jt4 44 = 
vl4 + v34 + 231 + 224 + 242 + 244 

hQl + hll + hQ3 + /il3 + /i22 + fc31 + h!4 + h23 + /*41 + /t33 + fc5 u = 
vQl + v21 + v41 + v51 + 2ll + 232 + 241 + z43 

hll + h31 + /*23 + /i32 + h24 + k42 + h34 + fc5 u = vQ2 + v22 + v42 + 
u52 + 212 + 241 

hQ2 + hll + M2 + hQ4 + fr31 + h32 + h24 + h33 + h43 + *5i 3 = v03 + 
v23 + v43 + v53 + 213 + 231 + 242 

h02 + hl2 + h21 + ^13 + h22 + W2 + h34 + M4 + A5i 4 = v04 + v24 + 
t/44 + 231 + t/54 + 214 + 232 + 241 + z42 + 234 + 243 

hQ2 + hll + /il2 + fc21 + hl3 + h22 + h31 + h23 + /i24 + fc5 2 i = v51 + 
231 + 232 + 242 + 234 + 243 
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hOl + hQ2 + h03 + hl2 + /*04 + M3 + h22 + hU + /i23 + /i32 + h24 + Jfc5 22 = 
v52 + 231 4- z32 + 241 + 242 + 243 

HOI + /i02 4- /i03 + M2 + /i21 + hl4 + A24 + /i33 + *5 23 = "53 + 231 + 

241 + z42 + ^34 

hOl + M)3 + h21 + h04 + hl4 + /i23 + h24 + h34 + fc5 24 = "54 + z34 
hll + M2 + h2l + /i04 + /i22 + M4 + /i33 + fc5 3 i = v51 4- 232 + 242 + 234 
hOl + h02 + hl2 + hl4 + /i24 + /*34 + fc5 32 = "52 + 232 4- z33 4- 242 4- 234 
h02 4- /til 4- W)3 4- h2l 4- M3 4- /i31 4- kbss = "53 + 233 4- 234 4- 243 
Ml+/i03+/i21+/il3+/i32+/i24+231 + fc534 = "54 4- 232 4- 233 4- 243 4-244 
/ill 4- hl2 4- /i21 4- /i04 4- /*22 4- M4 4- /i33 4- *5 4 i = vll 4- 1/31 4- 221 + 

232 4- 242 4- 234 

h01 + /i02 + /il2 + M4 + ;i24 + /i34 + fc5 42 = t/12 + v32 4- 222 4- 232 4- 233 + 

242 4- 234 

«)2+/ill + /i03+/i21 + /il3+/i31 + fc5 43 = i/13+v33+223+*33+*34+*43 
hi 1 4- h03 + h2l 4- hl'S 4- fiS2 4- /i24 4- £644 = "14 4- "34 4- 231 4- 232 4- 224 + 

233 4- 243 4- 244 

hOl 4- hOZ 4- hl2 4- h2l + /i04 4- M3 4- hSl 4- /i23 4- fc6 n = till 4- "31 + 
v61 + 221 4- 241 4- 242 4- 234 4- 243 

hOl 4- h21 4- M3 4- /i22 4- hl4 + /t32 4- /*24 4- Jfc6 12 = "12 4- "32 4- "62 + 

222 4- 231 4- 241 4- 233 4- 243 

hOl 4- h02 4- /i21 4- //22 4- hl4 4- h23 4- /i33 4- *6i 3 = "13 4- "33 4- "63 + 

223 4- 232 4- 241 4- z33 4- 234 

h02 4- /ill 4- hOS +'M2 4- h22 + h24 4- hS4 4- fc6 14 = "14 4- t/34 4- 241 + 

v64 4- 224 4- 233 4- 242 4- 234 4- 244 

hOl + h02 4- Ml 4- M)3 4- hl2 4- /i21 + M3 4- A14 4- kG 2 i = "61 4- 231 + 

242 4- 234 4- 243 4- 244 

M)2+/i03+M2+/i04+M3+/i22+/il4+fr6 22 = v62+232+ 233+242+243 

h02 + hi 1 + h04 + /il4 + /i23 + 231 + fc6;» = «63 + 241 + 244 

hll + /i04 + M3 + M4 + /i24+ 232 + 241 + *6 24 = "64 + 234 + 243 + 244 

hOl + h02 + hll + hl2 + /t04 + /*23 + *6 3 i = v6l + 241 + 233 + 242 

h02 + W>4 + /i!4 + h24 + fc6 32 = vG>2 + 231 + 244 

hQl + hll + M)3 + h21 + £633 = u63 + 232 + 241 

hOl + hll + /i03 + Ji22 + /il4 + 232 + 241 + Jfc6 34 = "64 + 244 

hOl + h02 + /ill + M2 + /i04 + h23 + k6^ = vOl + v21 + u41 + r51 + zll + 

241 + 233 + 242 

h02 + W)4 + hU + /i24 + fc6 42 = u02 + u22 + v42 + v52 + 2 12 + z31 + 244 
hOl + hll + h03 + /i21 + W43 = "03 + 1/23 + 1>43 + 1/53 + 213 + 232 + 241 
hQl + Ml + /i03 + /i22 + hU + fc6 44 = "04 + v24 + v44 + r54 + z!4 + 232 + 
241 + 244 
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h.02 + hi 1 4- h03 4- h21 + hl3 + k7 xi = vOl 4- v21 + v41 + u51 + zll + v7l + 
z33 4- 234 4- z43 

hi 1 + h03 + hl2 + fc04 + /i22 4- hl4 + k7 12 = v02 + v22 + v42 4- v52 + zl2 + 
231 + v72 4- 241 4- 233 + 242 4- 234 

/ill 4- M2 + M)4 4- M3 4- /i23 4- Ar7i 3 = v03 4- v23 + v43 4- v53 + zl3 + z32 4- 
v73 4- 242 4- 234 4- 243 

hOl + h02 + hl2 + hl4 4- fe24 + 4 = v04 + 1;24 4- v44 + v54 + zl4 4- 232 + 
233 4-242 + ^74 + 234 

hOl + h02 + hll + h03 + h04 4- k7 2 i = v71 + 231 4- 232 4- 241 
hQ2 + hQ3 + h!2 + h04 4- Ar7 22 = v72 4- 232 + 233 + 242 
hOl + h04 4- hl3 + z31 + z32 4- 241 + fc7 23 = v73 4- 233 4- 234 + 243 
/lOl 4- h03 + h04 4- hl4 + fc7 24 = v74 4- 234 

Then, the next step S104 is executed to carry out a 

matricial-equation transformation process. In this 

process, vectors K, H, U and V are set as follows. 

[formula 16] 



K = 


(kin. 




**, k7 24 ) 


H = 


(hOl, 


h02, * 


h44) 


U = 


(zOl, 


z02 , * 


•♦, z44) 


V = 


(vOl, 


v02, * 


••, v74) 



With the vectors K, H, U and V set as expressed by 
the above equations, the simultaneous linear equation can 
be transformed into the following matricial equation, 
[formula 17] 




It is to be noted that, in the above equation, 
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symbols Mkh and Muv each denote a GF(2) matrix comprising 
coefficients of the simultaneous linear equation 
described above. 

Then, the next step S105 is executed to carry out 
unitary transformation process. 

Let symbol N r denote the rank value of the matrix 
Muv as follows: 
[formula 18] 

rank (Muv) = N r 

Then, let symbol N m denote the number of rows 
composing the matrix Muv. By multiplying both the left- 
hand and right-hand sides of the matricial equation by a 
row-deform unitary matrix Q from the left, the matrix Muv 
can be deformed into a step matrix. In this process, a 
small matrix consisting of (N m - N r ) lowest rows of the 
matrix QMuv becomes a null matrix. 

Then, the next step S106 is executed to carry out 
small-matrix selection process. Let symbol M*kh denote a 
small matrix consisting of (N m - N r ) lowest rows of the 
matrix QMkh* In this case, the small matrix M* K h becomes 
null matrix (0) as expressed by the following equation, 
[formula 19] 

M* KH = 0 

Then, the next step S107 is executed to carry out 
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linear-relation equation generation process . This 
matricial equation is transformed into linear-relation 
equations , which are each associated with a row. Then, 
actual values are substituted for hOl, h02 , ••• and h44 to 
obtain the following relation equations: 
[formula 20] 

Qxc7 = klu + kl 2 i + kl 22 + kl 24 + kl 31 + A:l 32 + H34 + kl 42 + H44 + 
fc2i2 + fc2i 4 + fc2 22 + fc2 24 + Jt2 4 i 

0^:33 = fcli 2 + fcl 21 + fcl 22 + kl 23 + kl 3l + kl 32 + fcl 33 + H41 + ^143 + 
k2 xl + k2 t3 + k2 2x + A:2 23 + *2 42 
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0x48 = fcli 3 + fcl 22 4 *!l24 + ^32 + *:l34 + fcl 41 + *1 42 4 kl^A + *2 n + 

fc2i2 + k2 t4 4- k2 2 i 4 *2 22 + *2 24 + *2 43 

Oxe/ = Arl 14 + kl 21 4- M 22 + fcl^ 4 kl 24 + fclsi + kl 32 4- *1 3 3 + kl 34 + 
Arl 4 i 4- H43 4 *l44 + *2u + A:2 13 4 *2 14 4- *2 2 i 4- *2 23 4 *2 24 + l&u 

0xc7 = fcl 21 4- fcl 3 i 4- *2u 4- Ar3 4 i 

0x33 = AjIm 4- k\-s 2 4- *2 l2 4- fc3 42 

0x00 = *1 23 4 &I33 + *l 4 i + *2 12 + fc2i 3 4- *2 2 i 4- *3 41 + k3 42 4- ^43 
0xflE4 = k\ 24 4- A:!^ + *1 43 4- fc2 u 4- fc2i2 4- A:2 13 4- £2^ 4 fc3 42 + kA l x + fc4 2 i 
0x<:7 = kl 41 + fcl 42 4- A:2 2 i 4 fc2 22 4- &3 42 + ^43 + H n + fc4i 3 4 fc4 2 i 4- ^23 
0x74 = Arl 42 + M43 + k2 n 4- *2i 2 4- Ar2 22 + ^23 + fc3 42 + W43 + Jb4n 4- 
&4 12 + fe42i 4- fc4 2 2 

0x65 = fcl43 4- A:2 12 4 k2 i4 + *2 23 4 *3 42 + Ar4 13 4 fc4 l4 4- fc4 2 3 4- fc4 24 
0x33 = fcl44 + k2 u + Jfc2 24 + fc3 41 4 fc3 4 4 

0x8a = k2 n + A:2i2 4- ^42 + *3 44 4- k4 xl 4- A:4 14 4- *4 24 4- fc4 3 i 
Ox/7 = fc2 J2 + &2 13 4 *3 4 i 4- *343 + k4 u 4- A;4 12 4- fc4 2i -I- fc4 32 
0x29 = Ar2 13 -f fc2 14 4- *3 4 i + *3 42 + ^44 + fc4 n 4- *4 12 4 *4i 3 + *4ai + 
fe422 + A:433 

Oxal = fc2 14 4- fc3 4 i + ^44 4- fc4u 4- fc4 22 4- ^23 4- fc4 24 + Jc4 3 i + fc4 32 4 
fc433 + kAzA 

0x41 = fc2 2 i + &2 31 + A:3 4 i + £3^ + ^3^ 4- Jk4 u 4 ik4i 3 4 fc4i4 + ^23 4- 
fc4 3 i + Ar434 

0x74 m k2 22 4- &2 32 4- fc3 4 i 4- ^43 4 AS^ 4- fe4 n 4- k4 12 4- fc4i 3 4- k4 23 4- 
fc4 24 4- A:4 31 4- fc4 32 4 A:4 34 

Ox/4 = fc2 23 4- ^2^ 4- fc3 4 x 4 fc3 42 4 ^3^ 4- ^44 4- *4 U 4- k4 12 4- A:4 13 4- 
fc4i 4 4- *4 24 4- fc4 3 i + fe4 32 4- fc4 33 

0x57 = A:2 2 4 4- *2 34 4- &4 24 + ^34 

Ox/6 = fc2 4 i + fc3n + fc3 2 i + ^41 4- *r342 + ^43 + *4 n 4- A:4 i2 4- k4 13 4- 

fc4 2l 4- AT4J23 4- fc4 2 4 4- A:4 3 2 4- A:434 

0x7c = k2 42 4- Jk3i2 4- fc322 + ^3 42 4- fc4i 2 4- fc4 22 4- H23 4- £4^ 4- ^33 4- k4s4 
0x43 = A:243 4- *3i 3 4- ^3^ 4- A:3 41 4- Ar3 42 4- Jfc343 4- k4 xl + A:4i 2 4- k4 i3 4 

fc4 2 i + fc432 4 A:4 3 3 

0x5/ = A:244 4- *3i4 4- W 2 4 -h fc3 4 3 4- A:4 13 4- Ar4 22 4- A:424 + Ar4 32 4 Ar4 33 4- ^34 
0x7rf = kSu 4- *3 4 i + *3 42 4- fc343 + ^44 4- k4 xl 4- *4 12 4- fe4i 3 4- *4 14 4 

fc4 21 4- A:4 24 4 A4 32 4 ^4^ 4- &5 4 i 

0x26 = fc3i2 4 fc3 41 4 fc3 42 4 A:4 U 4- fc4i 2 4- k4 2 n 4 fc423 4 fc4 3l 4- ^33 4- fc5 42 
0x02 = &3i 3 + A:3 44 4- fc4 u 4- fc4 21 4- ik4 23 4- fc4 31 4 ^53 + *4 34 4- fc543 
Oxrfe = A:3i4 4- A:3 42 4- Ar3 43 4 Ar3 44 4 A:4 12 4- *4, 3 + A:4 14 4 fc4 22 4- ^33 4 

fc434 4- £544 
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0x8a = k'S 2 \ 4- *3 3 i 4- fc3 42 4- Ar3 43 + £3*4 4- k4 l2 + £4i 3 + *4 U + *4 24 4- 
fc4 32 4- £433 

0x7/ = fc3 22 + *3 32 4- k3 4 i + *3 42 + A:343 4- £3^ 4- k4 lx 4- *4i 2 + fc4 13 4- 
/r4 14 4- k4 23 4- &4 24 4- Ar4 3 i + fc4 32 

0x88 = ^3^ 4- *3 33 4- fc3 4 i 4- A:3 42 + k4 xx 4- fc4 12 4- *4 21 + fc4 23 4- fc4 24 4- 
fc4 32 4- fc4 j3 4- fc4 34 

0x54 = fc3 24 4- A:334 + Ar3 42 4- kZ^ 4- k4 | 2 4- A4i 3 4- fc4 22 4- A:4 24 4- *4 33 + *4 34 

0x7/ = *3 4i 4- *3 42 4- Jt4i2 4- *4 2 i + A:4 23 4- fc424 4- Jb4 32 4- k433 4- £4:* 4- 
k5u 4- k5 2 i 

0x7/ = *3 42 4- k4 n + fc4i 2 4- *:4 13 4- Ar4 2 i 4- A4 24 4- A:4 31 4- Ar4 32 4- A:4 34 4- 
A:5n 4- k5i3 4- k5 2 i + &5 23 

0x8a = k343 + ^3 44 4- fc4 n 4- *4i 3 + &4 2 i 4- fc4 3 i + fc4 33 4- k4^ 4- fc5u 4- 
k$i4 4- k%>2i 4- fc5 2 4 

0x00 = fc344 4- *4 12 4- *4 X4 4- fc4 22 4- &4 32 4- ^4^ 4- &5i 2 4- &5 22 

Ox/7 = k4 1 1 4- fc4 13 4- ^4^ 4- ^4^ + &4 41 4- Jt5 u 4- fc5i 3 4- &5 2 i 4- A5 23 4- fc5 41 

0x29 = Ar4 12 4- *4i 3 + *4i 4 4- fc4 21 4- k4^ 4- &4 24 4- *4 31 4- ^33 4- fc4 34 4- 
k4 AX 4- fc4 42 + A:5i 2 4- *5i 3 4- &5i 4 + kb^ + *523 + *5 24 4- fc5 4 i + fc5 42 

0x26 = fc4 13 4- A4 14 4- *4 22 4- *4 24 + A4 32 4- k4 M 4- Ar4 42 4- £443 4- fc5i 3 4- 
kSu 4- k52s 4* £524 4- &5 42 4- k5 4 z 

0x88 = fc4 i4 4- fc4 2 i 4- fc4 23 4- fc4 3 j 4- £433 4- fc44i 4- fc4 43 + *444 4- A:5i 4 4- 
fc5 24 + kSa + A:5 43 4- kS^ 

0x43 = fc4 2 i 4- *4 31 4- k5 4 i 4- k6 lx 4- k6 2 i 

OxeO = A:4 22 4- &4 24 4- Jb4 32 + Ar4 34 4- A:4 4 i + A:4 42 4- fc4 44 + fc5 44 4- fe6 n 4- 
kf>\ 2 4" kfyn 4* fc6 32 

Oxcb = fc4 23 4- fc424 + U33 4- k4 3A + fe4 4x + fc5 43 + fc6n + fc6 13 + ^621 + fc633 

0x81 = £4 24 4- Ar4 3 4 + A:4 42 4- A:4 43 4- £643 4- k6 12 + A:6 22 

0x7e = Ar4 41 4- k5 4l 4- A:5 43 4- fc6 13 4- *6 23 

Oxdd = A:4 42 4- *4 43 4- /c4 4 4 4- 4- fcS^ 4- fc6i4 4- &6 24 

0x00 = Ar443 + &4 44 4- 4- k6 u 4- £6 34 

0x00 = 4- fc5 4 i 4- fc544 4- fc6n 4- fc6 3 i 

0x/7 = At5 u 4- *5 41 4- k6n 4- fc6 3 i 4- k6 4 i 

0x14 ss fc5 l2 4- A:5 4 i + Jfc5 43 4- A:5 44 4- fc6ii 4- A:6i 3 4- k6 14 -f k6 21 -h 4- 
A^j 4 4- fc6 42 

0x23 = k$i 3 4- fc5 4 i + A:5 42 4* k6i \ 4- fc6i 2 4- ^6 22 4- Ar6 24 4- fc6 3 i 4- ^6 34 + 
0x8a = fc5 i4 4- k5i4 4- k6 u 4- A:6 34 + /c6 44 

0x64 = A:5 2x + A:5 3 i 4- A:5 4l 4- *5 42 4- k6n -h fc6i 2 4- k6 21 4- ^632 
0x06 = fc5 22 4- fc532 4- fc5 42 4- fc5 43 4- fc6i 2 4- k6, 3 4- ^6 22 4- £633 
0x00 = kSn 4- fc5 33 4- k5 41 4- fc5 42 4- ^5^ 4- k6 u + ^12 4- A:6 14 4- A:^ 4- 
fct>32 4- A:6 34 
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0x00 = A:5 24 + *5 3 4 + fc5 4 i + fc5 43 4- fc5 44 + *6n 4- fc6i 3 + k6 14t 4- Jfc6 3 i + 
£633 + ^634 

Oxd = &5 41 4- fc5 42 + fc5 43 4- fc5 44 + fc6ii 4- k6 l2 + fc6i 3 4- A:6 14 + kG 21 + 
k6 23 + k6 32 + k6 3 4 + ^641 + k7i 1 4- fc7 2 i 

Oxfc = k5 42 4- fc6i2 4- k.621 4- k6 31 + k6 32 4- £645 4- k7 13 4- fc7 23 

0x18 = Ar5 43 4- fc5 44 4- k6 13 4- fc6i 4 4- fc6 2i 4- *6 22 4- fe6 3 i 4- fc6 32 4- kd 33 + 
Ar6 34 4- *6 43 4- *6 44 4- Ar7 13 4- *7i 4 4- k7- 23 + k7 24 

Ox/4 = fc6 21 + fc6 22 4- fc6 23 4- fc6 24 + fc6 3 i 4- fc6 32 4- fc6 33 + fc6 34 4- fc6 41 + 
fc6 42 4- fc7n 4- fc7 J2 + Ar7 2 i 4- &7 22 

Here, the following equation holds true, 
[formula 21] 

rank(M*KH) = N m - N r 

Thus, the above 60 linear-relation equations are 
linear-relation equations independent of each other. It 
is therefore obvious that (2 60 - 1) linear-relation 
equations obtained from linear concatenation of any of 
the 60 equations on the GF(2) hold true. If the number of 
such linear-relation equations is large, it is feared 
that a new attack that the designer of the encryption 
method is not aware of is brought about. For this reason, 
the total number of linear-relation equations obtained by 
adoption of the method described above can be used as an 
indicator for the evaluation of the encryption level. 

[Second Embodiment of Encryption level Indicator 
Calculation Process] 
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As a second embodiment of "the encryption level 
indicator calculation process provided by the present 
invention, a typical process of applying an encryption 
level evaluation method provided by the present invention 
to 'Hierocrypt-3 ' is explained in detail. * Hierocrypt-3 ' 
is the name of an AES-compatible block encryption process 
proposed by Toshiba. The 'Hierocrypt-3' block encryption 
process is a common-key block encryption process with a 
block length of 128 bits and a key length of 128, 192 or 
256 bits. A typical encryption process explained below is 
a process with a key length of 256 bits. 

First of all, the step S101 of the flowchart shown 
in Fig. 1 is explained. As described earlier, at this 
step, an encryption processing algorithm is set. This 
step is executed as a process to set the * Hierocrypt-3 ' 
block encryption algorithm proposed by Toshiba. 

First of all, a matrix P32 is defined as follows: 
[formula 22] 



Let symbol P32I denote the inverse matrix of the 
matrix P32. Next, matrices M51, M52, MB1 and MB 2 are 
defined as follows: 



f 14 04 74 OA 
OA 14 OA 14 




OA 14 14 14 
\ 24 04 14 14 



[formula 23] 
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Then, matrices M51, M52 , MBl and MB 2 are defined, 
being expressed in terms of the matrices M5 and MB as 



follows : 



[formula 24] 



A/5 = 



MB = 



/ 


MSI 




OA 




04 


I 


OA 


/ 


MBl 




OA 




OA 




OA 



OA OA OA ^ 

MS2 OA OA 
OA Af5l OA 

OA OA M52 j 

OA OA OA \ 
MB2 OA OA 1 

04 MBl OA 

OA OA MB2 ) 



Next, round dependent constant vectors Gi (where i 



= 0, '*•, 9) are defined as follows: 
[formula 25] 
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C3 - (Ml*M2,W3 t M4,Wl 1 ^32 > A33 f A34 J 0,0 t O l O t O,0,0 7 O) 

GS ~ (MH^O^/iG^^tal,^*^ 
Ctt = (tol,ft02,&03,j^,tel,j^ 

G7 » (^L^»^i5a4 ? ftll 1 ftl2 ? M3 ? M4,0 t Ca t O l 0,0 T O ) O ? 0) 
(38 ~ (Ml, &12, fcl3,£t4, &32*A33,A34, 0,0, 0 ( 0,0,0,0,0) 
(&31,*32,«3, ^,^1^02^,^04,0,0,0,0,0,0,0,0) 

It is to be noted that a vector HH with constants 
in the above equations used as elements is the same as 
the vector HH of the first embodiment implementing the 
encryption level indicator calculation process as 
described earlier. 

Next, a vector ZZ with its elements composing the 
right half of a sequence of initial values of the key- 
scheduling part is defined as follows, 
[formula 26] 

ZZ=(a3i, 232. 2^33,234, 235, 236, 237, z38, z41, z42, z43,244, z45, z46,z47, z48) 
By using these, the right half of the key- 
scheduling part in the Hierocrypt-3 common-key encryption 
algorithm is expressed below. It is to be noted that the 
operator + used in the following expressions is an 
additive operator in the Galois field GF(2) . 
[formula 27] 
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Z0M5*ZZ+GO 
WO = P 3 2* ZO 
Z l=M5*WO+Gl 
W 1 = P 3 2 * Z 1 
Z 2=M5 *W1 + G2 
W2=P32*Z2 
2 3=M5*W2+G3 
W3=P 3 2 * Z 3 
Z4=M5*W3+G4 
W4=P 3 2*Z4 
Z 5~M5*W4 +G5 
W6=MB* (Z5+G6) 
Z6-P32I *W6 
W 7 -MB * (Z6+G7) 
Z 7 = P 3 2 1 *W7 
W8=MB* (Z7 + G8) 
Z 8=P 3 2 I *W8 
W9=MB* (Z 8+G 9) 
Z 9 = P 3 2 [ *W9 

Symbols ZO, Zl, Z2 , Z3, Z4, Z5, Z6, Z7, Z8, Z9, WO, 
Wl, W2, W3, W5, W6, W7, W8 and W9 used in the above 
equations form the right half of the sequence of 
intermediate values of the key-scheduling part. 

Next, these intermediate values are expressed by 
being split in accordance with the following equations . 
[formula 28] 
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Wn=Wn 1 ||WN 3 

Symbol | | used in the above equations denotes a 
concatenation of vectors. 

Next, let non-linear transformation part outputs of 
rounds be VO , VI, V2 , V3 , V4 , V5 , V6 , V7 , V8 and V9 . Each 
of the outputs is a vector consisting of eight elements 
as follows, 
[formula 29] 

V0= (vOl, v02, v03, v04, vOS, v06, v07, v08) 
VI = (vll, vl2, vl3, v!4, vlS, vl6, vl7, vl8> 
V2= (v21, v22, v23, v24, v2S, v26, v27, v28) 
V3= (v31, v32, v33, v34, v35, v36, v37, v38). 
V4= (v4l, v42, v43, v44, v4S, v46, v47, v48) 
V5= (vSl, vS2, v53, v54, v55, v56, vS7. v58) 
V6= (v61, v62, v63, v64, v65, v66, v67, v68) 
V7=(v71.v72.v73,v74, v75. v76,v77,v78) 
V8= (v81, v82, v83, v84, v85, v86,v87, v88) 
V9= (v9i, v92, v93, v94, v95, v96, v97, v98) 

Here, vectors Zi and Z 2 are set as follows, 
[formula 30] 

Z »= (zll, zl2, zl3, zl4, zlS, zl6, zl7, zl8) 
Z a— (z21, z22, z23, z24, z25, z26, z27, z28) 
With the vectors Zi and Z 2 set as described above, 
the left half of the sequence of the key-scheduling part 



in the Hierocrypt-3 common-key encryption algorithm is 

expressed as follows. 

[formula 31] 

ZOi=Z 2 

Z 0 2 =Zi+VO 

Z li=Z0 2 

Z U=Z0,+V1 

Z2i=Zl a 

Z 2 2 =Z1, + V 2 

Z 3i=Z 2 a 

Z 3 a =Z 2 A + V3 

Z4»=Z3» 

Z4a=Z3i+V4 

Z 5»=Z4 a 

Z 5 2 =Z 4i+V 5 

Z6*=Z5 a +V6 

Z 6 a= Z S x 

Z 7i=Z6 2 +V7 

Z 7 2 -Z 6, 

Z8i = Z7 2 +V8 

Z 8 z =Z 7 l 

Z 9i=Z8 2 +V9 

Z 9 4 =Z 8s, 

Symbols Z0 X , Z0 2 , Zli, Zl 2 , Z2i, Z2 2 , Z3i, Z3 2 , Z4^ 
Z4 2 , Z5i, Z5 2 , Z6i, Z6 2 , Z7i, Z7 2 , Z8i, Z8 2 , Z9i and Z9 2 used 
in the above equations form the left half of the sequence 
of intermediate values of the key-scheduling part. By 



using the intermediate values obtained as described above, 

round keys Kli, Kl 2 , Kl 3 , Kl 4/ K2 X , K9i and K9 2 are 

expressed as follows: 
[formula 32] 
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Kl i =ZO i + Vl 
KI*«ZU+V1 
KU-Z U+Vl 
KU=ZO a + Zl 4 
K2v=Z 1 x + V2 
K2 2 »Z2 a +V2 
K2 3 =Z2 4 +V 2 
K2*=Z1 2 +Z 2* 
K3 1 =Z2i+VS 
K3 S =Z3 3 +V3 
K3 3 =Z3 4 +V3 
K34=Z 22+2 3* 
K4 l =Z3 l + V4 
K4 8 -Z4 3 +V4 
K4 3 =Z4 4 +V4 
K44 as Z 3 2 + Z 4 4 
K5 l =Z4,+V5 
K5 3 =Z5 a +V5 
K5 S =Z54+VS 
K5 4 =Z4 2 +Z54 
K6 4 -Z 6x+Z 5 3 
K6 3 =W6 i + VB 
K6 3 =We 3 +V6 
K6 4 =Z5,+W6 3 



K7 2 =W7,+V7 

K7 3 =W7 S +V7 

K7*=Z 6i+W7 3 

K8 t =Z8x+27 3 

K8 s =W8i+V8 

K8 3 =W8 3 +V8 

K84=Z7 1 +W8 2 

K9»=Z9,+ Z8 3 

K 9 s— W 9 x+V9 

K9 S =W9 2 +V9 

K9*=Z 8 t +W9a 

It is to be noted that symbols Kll, K12, K13, K14, 
K21, K91 and K92 each denote a vector consisting of 

eight elements . 

The following description explains the step S102 of 
carrying out a process to eliminate intermediate 
variables in the processing represented by the flowchart 
shown in Fig. 1. If the eight elements of each of the 
vectors Kll, K12, K13, K14, K21, K91 and K92 are 

expressed by their actual values, the vectors Kll, K12, 

K13, K14, K21, K91 and K92 can be expressed as 

follows: 

[formula 33] 
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t/15 + *25 
vl6 + z26 

r Ml -4- h21 + M3+ t>ll + z$2+ z42 

MI + hl2 + W 3 + A23 + v 13 -4- *3 1 -J- z41 + *34 * js44 
M2 + hl4 + fc34 + oi4 + s31 -f *41 

kt)2 «+■ /j03 + A04 + h32 vie + *35 +- *45 4* *37+ *4T 
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*M + hm 4- fm + t)l2 + *43 + z36 + *37 4- *46 + z47 
/tOl + ft02 4- ft03 + «13 4- **1 4- £35 4- *44 + *45 4~ *37 4- *38 -5- z47 + *48 
£02 4- WW 4- ul4 4- 241 «r z35 4 z45 4- *3& 4- *4S 
Ml 4-M2 + M3 4- M4 + vl5 + «31 4~*32 4-z41 4- *42 + sAG 4-*4$ 
frl2 4- &13 4- &144- trt6+ *32 + *33 + z42 4- *43 + *45 4- *4? 
/*13 + /il4 4- »17 4- *31 4- *41 4- *33 + *34 4- *43 +*44 4- *45 4- *46 4 z48 
^ Wl4-W2^^134-^l4-t)ia + z4l4-z344-*444-^45 + ^47 4-^i8 j 

f *Ol4-M34-tm4-zn + z42 + z354-*3G + *45+z40 > 
M>1 4- AD2 4- + v02 4- *I2 + *43 4- *36 + z37 4- z45 4- *47 
M)l + /*02 4- *03 4- i<)3 4-*13 4- s41 4- ^35 + z44 4- 4- z37 + z33 + z47 4- 
h02 4- A04 + t*M 4- *14 4- s41 4- «35 -f «45 4- *38 + z48 
Ml 4- &12 4- A13 4- hW 4- «« 4- *31 4- *32 4- *41 -h zl5 4-s424- *46 4- *4S 
M2 4- &134- tK)6 + z32 4- *33 4- z42 4- *16 4- *43 4- *45 4- *47 
M3 + hU 4- i#7 + *3I 4- *41 4- z33 4- *34 4- z43 + z!7 4- *44+ z45 4- *4$4- *4« 

v ML + /a24-M3*t^^*31 + ;Ha*zM^ ' j ' 

r 1*14*214*11 V 
*024-*224-*X2 
*03 4-*>23+*13 
*04+t>24 4-rl4 

t*QS4-*254-*15 , • . 

v064r264xl6 
v07+«27-Ml7 
^ wOS4-«28 + *13 / 

f A024-M24-Wi + tol4-^4-if2l4"*3l4-z32+^ ^ 
4-*47 + .*48 

Jt03 + /s21 4- &13 4 hZ2 4- ft32 + A24 + *22 4- *31 4- z32 + *33 4- *37 4- *3S 4- *47 
' +548 ' * ■ " - • " " ' • 

Ml 4- All Hh 4- ii04 '+ H22 + ^14 4 A 23 4- to3 4- + z3 1 + *32 4-*334-*34 
4-z38 4-^48 

Ml + Ml 4- &22+ ft24 4- A34 4- 1>24 4- ^31 4- *33 4-JS35 4 z36 4- z4$ + z37 4 4?45 
4-z3a4-z47 + z48 

IM>i 4- *U2 4- ^12 4- A04 4- /*31 + M4 4- h32 + A33 4- hU 4- *i25 4- z3 1 4- is41 4- z35 
4-238 

fcOl 4 ^02 + fell 4&034- hlZ 4 A32 4- k33 4- hM 4 t^26 4- *32 + z42 + s35 -h z36 
hOl + &02 + fell 4K ^£13 4- ft!2 4- A04 4- 414 4- &U4 W4 +*27 4- x33 4-^43 4- z3S 
4-*37 

^ hOH-/tll4-?t034W34- ^3l-h/tl4 + h32+ W34v^ + «344z444-z37 ^ 
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f ?*0l4fcll4M24A3l4ta34tOl42$24241 4*3342344 2434*354236 > 
4237 4 246 4 z38 4 z47 4 z48 

fe02 4 Ai2 4 M3 4 A31 4- k32 4 &34 4*22 4 r4l 4 *33 -h *42 4 *34 4 z44 4 236 
4237 4 2384*47 4 248 

All 4- fm 4 A13 4 Wl 4- hU 4 A32 4 A33 4 1>23 +241 4- 242 +*34 4 z43 4 *37 
4*384 248 

/ai + ftM + hl4 4 A32 4 /*34 4 u24 + 231 4 *32 4 *33 4 z42 4 234 4*354*44 
44:36 -|- £45 + 237 4 246 4 247 4 z48 

fii}l + fc024-AU + A21 4 fc22 + JtU + A23 4*24 4*25 + 231 4*324 z4l + 233 
+*34 + 2354 *48 

M)2 4 hi 1 4 &03 4- J*2 4 4- W» + h2 4 4 1£$ + *32 + *33 4- * 42 4 z34 + *36 
+*45 

/tOl4AC84A124A04 4to3 + A23 + /i24 4trZr^ 

Ml 4 fat + A04 + A13 4 A22 4 fc23 + *31 4 *32 4 «28 4 z33 4 244 4 *38 4 247 
^ 4z48 j 

f JOil 4 « 1 4 M2 + ft31 4 A33 4»U 4 *21 4 *32+ *41 4 «33 4 *34 4 *43 4 zU \ 
+r36 4 z37 4 *4G + *38 4 s47 4 *4$ 

A02 4 hi 2 4 ftl3 4 &31 4 A32 4- A34 4 V 1 2 4 »22 4 *4l 4 *33 4 242 4 z34 4 *44 
+*36 4 237 4 238 4 247 4 248 

Ml 4 AG3+ M3 4 A31 4 M4 + A32+fc33 4 «13 4 223 4 241 4 z42 + *34 + z43 
+*37 + 23S + 24S 

hU 4 h&4 + A14 4 A32 4 A34 4 irU -J- 231 4- *32 + 224 4 *33 -4 **2 4- *34 4 235 
+z44 4 *36 4 245 -h*37 4 246 4 247 + 248 

A01 4 hG2 + hll + A21 + + hU + 1*23 + A24 4 i?15 4 231 4 232 4 z41 + z33 
4*25 + z34 4 235 + 248 

hm 4 M 1 4 hOZ 4 A12 4 h22 4 fc23 4 &24 4 vtt 4 232 4 233 4 242 4 234 4 226 
+236 + 245 

AD1 4 ^ 4 M2 4 7t(W 4 A13 4 ^ + *^ 

Ml 4 &21 + ft04 4- A13 4 A22 + &23 4' 231 + v18-r 2324- 233 4 244 4 228 4 238 

: ^ 4247 + 248 j 

r vllHh«3l4 221 > 

v!2-4t324222 

vI3 4«33 4223 

vL4 4r34 4224 

vl54*«33 4 225 

vl64-*36 4226 

vl74*374227 
^ rl8 + t»38 -|-228 j 
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All* AOS 4- ftOA + A3l 4- hl4 + A234- A32 + A33 + A34 + *324-*33 + z434-z35 
-M3fc4-*38 

All 4- M2 + 621 + A04 4 A32 -I- fc24 4- h33 + A34+ *S3+ a3l + *4l 4- *34 + *35 
4-z444* s364- *37 

AQ1 + MJ&4- A034- A12 4- A21 4- ACM 4« A31 4- hS2 + Ai34 . + 4- *31 * *41 + *36 
4-*3S 

AOi 4- ttV2 4- All 4- A03 + A22 4- A31 4- A324- fc24+ A14-+ *35-f -31 + *33 4- *35 
4-z3S 4- 245 + z37 4- *46 -f z47 

AOI Hh ADZ 4- AG3 4- Al2 + A21 + A04 4- A31 4- A23 4- A32 4- A33 4- z3X + v36 + *32 
4-*34 + *354-^4-z45*z374-*464-*384-^74-2^ 

A02 4- W>3 4- A21 4- AO* + A13 4- A22 4- A31 4- A32 + A24 4- A33 + A34 Hh r31 4- *32 
4-t>37 4- *33 4- z3S 4- *37 * *46 4- *38 4- *47 4- z4& 

AOI + bG2 4- A21 + A04 + A31 4- A14 + A23 4- A24 4- A33 4- *32 4- vZ8 + z34 + z35 
^ 4-*364-*454- *46* *38 4-*48 > 

r A01 + ftf24-A034-A2l4-A04 4.A22 + A3r4-tm4-*^ ^ 
AQ2 + AOS 4- AG* 4- A22 + A23 4- A32 4-i?32 4- z*3 4- *3S 4- «36 4- *4& 
MJ3 4- A21 4- AO* 4- A23 + A24 4- A33 4- *33 4- z4l 4- *44 4- z36 + *45 4- «37 
AOl 4- A02 + A03+ A2t 4- A24 4- A34 + *N + *41 4- *37 + z464- z*7+ *4S 
AH 4- A12 + A2i 4- A13 4 A24 4- A33 + A344- 1?35 4 z31 4 x34 4 *43 4- *44 4- 245 
4*46 4 z47 

Al 1 4 A12 4 AS J 4 A13 4 A22 4- A14 4 A34 + ^31 4- 1#6 4- «32 4- *44 + *45 + M€ 
4-247 *f ziB . - • 

A12 4- A13 4- *i22 4- 1*31 + A14 4- A23 HK z32 -h z41 -h t.<J7 4- z33 * z46 z47 4- z4$ 
AU + &12 4- A144- ?*234- 7*32 + ^334- A34-f *334- s42 4- ^38 *43+ z44+ z 45 
^ 4-^464- x48 j 



53 



&Q2 + M)3 + A04 + A22 + A23 + A32 + 1&2 + ti22 + 512 + 543 + 5$5 + 535 + 54$ 
AG3 -I- ft 2 1 + + H23 + tol + A33 + u03 + u23 + z 13 + z4 1 * *44 + *3G + *45 
+537 

A0I + hQ2 + A03 + A21 + A24 + A34 + «04 4- u24 + *14 + 541+537+ z46+ ^7 
+54S 

All + 142+ A21 + hl3 + k24 i + /i33+ fcM + trf>5 + t#5 + *31 + 5iS + *34 + *I3 
+*44 + z45 H- 2J46 + 547 

hll + A12 + A21 + M3 + A22 + hl4 + fr34 + 1«06 +i?26 + *3 1 + z32+ *15 4- *44 
+*45 + s46 + r47 + *48 

M2 + A13 + h22+/m + fcl4 + A23 + x.«}7 + u27 + J532 + 541+533+517+540 
+547 + *48 

Ai 1 + M2 + AM + A23 + A32 + A33 4- A34 + vQS + ti28 + 533 + *42 + *43 4 544 
^ +zl3 + z45 + r40 + 548 j 

r t>01+tr21+v41 + 5ll \ 

*02 + v22+t>42 + 5l2 

t&3 + *23 + t>43+5l3 

trf>4 + i^l+^ + n-l 

«05 + tr25 + xrf5 + sl$ 

«0G + ir26+v46 + £lC 

*07 + B 27+*47+*17 
v tia8 + t'28+t>48 + *18 j 

f A&l+All+AQ3+M2 + Al3 + A23 + A33 + A34+t;4i + 23 \ 
+*37 + *3S+z47 + *4S 

A01 + AQ2 +M1 + AI2 + A21 + AQ4 + A13 + Al4 + A24 + A34 + ©42 + 531 + 532 + 533 
+s36 +«46 + *38 + *48 

A01+ A02+ A03+ A12 + A21 + A13 + 7*22 + A31 + A14 + *43+531 + 532 + 533 + 534 
+*35 + 545 + 537 + a47 

A02 + All + JU2+ AQ4 + 422 + M4 + h32 + A33 + M4 + v44 + 531 + 533 + 536 + 537 
+546 + 547' 

&&1 + hlX + h£»+ h!2 + li2V + h04 + h31 + h33 + h34 + 53\ + «45 + 532 + 541 + 542 
+534 +535 + 544 + 537 + 538 

M& + Ai2 + /*n4+/*13 + &22+k32+ ^34 + 531 + 532+ *41 + *4S+ z33 + 5^2 + 543 
: +536+^38 

hOl + AU + A03 + A13 + A31 + A14 + A23 + A33 + 531 + 5*2 + 541 + z33 + 542 + 1?47 
+534 + 543 + 535 + 544 + 537 
\ Aft2 + All + J«)3+M4+A32 + te4 + A33 + *31 + ^ > 
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f m2+ hM+hlZ+hl±+h& + bM+vA\ + *3l 4- 233 + *42 + s34 4- z4S -I- 236 -r 245 \ 
+237 4- 247 + 248 

Ml 4^03 + M4+^ + t^ + 232 + 241 +2^ + 243 + r35 + 244 + 237 + 
+248 

A01 4- 4- hi 1 + AO* + hZl 4- 1«43 + *31 + *33 + 242 + 244 4- 236 4- 245 + z38+247 
mi 4- fo>3 + A12 4- fM 4. fci3 4- M4 + fc32 + *33 4 &34 + *44 4 232 + *U + 233 + 242 
+r35 + 236 + *4tf + 247 

1 4- WJ2 + ft 1 1 + WKl + h 21 4- 4- h22 4- 1*31 + fe23 + h34 4- -*J5 4- 232 + 2*1 4- *33 
+242 4- 235 4 244 4- *36 4- 246 4- «38 4- z47 

AO2 + A03 + fcL2+A21 + &Q4 + fc224-fr31 4- h23 4 &32 + A24 + *3J 4- z4l 4- «46 4- 233 
4-242 + 234 + 243 4- 235 + s3S 4- 245 + a37 4* 247 4- 24$ 

*03 + h04 4- A13 4- *22 + &23 + h32 + ii24 4- *33 + 232 4- 2*1 4 242 4 v47 4- 234 + *43 
+235 + 244 + z36 4- 237 4- 246 4- 238 4- 248 

&>1 + M&4- /i03 4- A21 + h22 + fc!4 4- £24 4- W3 4- *31 + 232 4 *4 1 + *43 4- 1>48 + 235 
V +245 + *37 + 24fi 

r &02 4- A04+- A13+ hlA + &33 + A34 +-ull 4-u31 + 221 + 231 + *33 + *42-h *34+ *43 V 
4-236 4- 245 4- 237 4- 247 4- *48 

kOl 4- !m 4- hl4 + hU 4- vl2 4- 1?32 + 222 4- 232 4- z41 4- 234 * 243 4- 235 4 *44 4- 237 
+246+238 + x43 

AQl + fc02 + Ml + /iO4 + ^ + ia3+^ + 23J + 2ltt + 2^ 245 
+238+247 

hOl 4- ft03 + fc!2+ fc04 + + &14 4- &33 .4- *33 4- ft34+ «U + ti$4 + *S2+ *41 4- 224 
4-s33 4- *42 4- 235 4 236 4- *46 + *47 

hOl 4- &82 4- hll 4- £03 + A21 + A04 4- /*22 -r hSX 4- i»23 + &34 4- vl$ 4- v3S -h *32 4- ^41 
4-z33 z42 + Jt25 + 235 4- 244 4- 236 4- «46 4 238 + 247 

HV2 + h03 4- h!2 4- + 1*04 4- h22 4- hat -h /i23 4- hS2 + h2A+vlG 4- «3I + «36 Hh 24 1 
4*33 -h 2« + 234 4 243 + 226 4- 235 + z3® 4- 245 Hh z37 4- 247 -h 248 
A03 4- A04 4- M3 4- 4- ft^ 4- h32 4- ^24 f &33 4- vl7 4- 232 4- M + u37 4- 242 + 234 
4-243 4- 235 + *44 4- 227 4 236 4- *37 4- 246 4- 2^8 f ^48 

hOl + hQ2+ ft03 4- Ml 4- h22 4- Al4 4- &24 4- *33 + 231 4- «fl« 4 2324 241 4- tr38 4- 243 
^4-2354-245+2^ + 237-1-2^6 

f «ll+t?31+Ti51+221 > 
t?12 +t>32 + v52 +222 
ul3 + v33 +v53 + 223 
vl4+v34+tr54 + 224 
t?15+v35+v55+225 
vi6+v36+«58+226 
trl7 + 1*37 + »57 4-227 
^ rI8 + v38+*58 + 228 j 
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Kt>2 = 



A01 + Ml 4- hl2+hM 4 &22 4- &23 + &24 -r r?53 4* z3i + *4l +z35 4- z3& 
&01 4- M24- H2X 4- A22 4 A24 * v54 -I- *32 4- r33Hr *42 + *34 + z43 4- M4 + z30 
&Q24ta»4'M24Wl4A04 + M3 + k22 4-M4 4/*33 + 
*934&04 4M34/i224M4 4-*23 4 fc344-*31 + i£$4*344- z374*47 
h21 -r &044- &31 + AH 4 A23 + A24 4**31 4- z32 +u57 4- s35 4- »45 4- *38 4- *48 
AD1 + fcftt 4* hit 4- h03 + M2 + A22 4- WH + M3 + M4 4- h32 + *24 4- W3 4- J*34 4- *32 
^ 4*35 4 w58 4 £45 / 

" AJttHh W2+/W+A13 + AaHhA32 + /i24 + fc34 + tf51+-z434-«444-*47 \ 
fc)l4Ml4WJ34 M3+ft3HhM4^/i24 4-fe33 + t;52 + z44 4*45^^4d 

i 4 WI2 + fti 2 + h2l 4 + /i3 1 4M4 4- &32 + A34 + t&3 + *U 4 z45 4 *4S 
AlOI 4- Ml 4* MB -i- hi 2 4 -MM 4 &22 + A3l 4- *23 + J*24 4- *33 + /t34 4- v54 Hh *42 + *43 
4z44 + z46 

fell 4 A31 4- M4 4W4 + v$5 + *43 + *4& 
Ml 4 M24- A22+ h3l 4 *4l 4- t£6 4 «44 4^*47 
M2 4 AM + ft234- W24 *41 4- *42+ *57+ z45 4- *48 
\ M3«|»h24 + h33-f fv34 4^42i-t«e + ?4& 

f &024-M24-^ + M34^ + A32*/fc24 + W + ^ \ 
4-*44 + z47 

HOI 4 M 1 4- ft03 4- AM 4 A31 4 A14 + &24 Hh &33 H- trt)2 4 *22 4 *42 4-*I 3 -f *44 
+z45 + z48 

A01 4* + M24 &2L 4 W4 1*314 hU f fc32-f A344 «034- c23 4- 1>43 + *13 
4-z4l+x45-*-*46 

^ 4- Ml 4^124^4-^4^1 4-^ + ^ 

+»44 4- *14 + 242 4 z43 4 z44 4- z4fi 

Mi + Mi + M4 + &344iK>5^tf2S+*454-zl5+z43^z46 
Ml + M2 4- ft22 4 fcH 4 + tr26 4- *41 4- v46 4- *16 4 z44 4 z47 
h\2 4 M3 4- fc23 4- *S2 4 «07 4- «27 4- *4l 4^ s42 4- »47 4 * 17 4 «45 + 2^48 
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r M» + &2l + hl3+&22 + fc23 + *n + **31 + t£l + v61 + 521 + s33 -I- zM + 543 
+*44 + 537 

M 1 + M)3 + *21 4- h22 + *14 + h2S 4- A24 + i?l2 + «32 + i;52 + 1$2 + *22 4- *34 
+*354-*44 + 53S 

Mtt -fWl 4- fcl2+W)4 + &22 + ;i23+M4 + t>13 + u33 + *53 + *3i + ti63 4-523 
+541+535*536 

ftfil 4- /02 4- fcll + fc22 4- A24 + v!4 + vU + «54 4 532 4- v€A + z24 4- 533 + 542 
+ *34 4- 543 + 544 + *36 

A02 + «53 + frj 2 4- h2l + ft04 + hl$ + h22 + frU + ft33 + A34 + t>15 4- ttf5 + v5o 
+*33 4- tiCS + 525 + x36 + x « 

A03 + h84 4- &13 + &22 + ftl4 4- k23 4- h&L + ulS + z31 + v36 + i>56 + zZA + 
+526 + 5374-547 

hZl + MM 4- |p3l 4- h!4 4- A23 + A24 + t>17 4- 531 4- 532 + *«37 4- v57+ s35 4- 
+527 + *45 + *3S + *48 

A01 + fc02+- Ml + /*03 + Al2 + k21 +/i04 + hJ3 + M4 + £32 + *24 + /t33 + &34 
+tilS + ^32 + i?33 + ^35+t'5d + j45 + v<i$+z28 

/ M>l + ME24-Ml+/403 + ftl24-ftte+fa^ \ 
+535 + 536 + 538 

ft02 + Ml + A03 4 &12 + K21 + A04 + &13 4- h2A + t62 + *3i + 541 + 533 4- 534 
+z43 4- 535 + *44 + *36 + z&t 

hll + A03 4- *12+ &21 + MM + M3 4- &22 + M4 + t«3 + s32 + 542 + 534 + *35 
+544 + 536 + 537+538 

ftOI + MB 4- All + tm + M3 + /i22 + 531 + 532 + x41 + t>64 Hh *42 + *35 + 537 
7*02 + &12 + /j22 + /j^J + /i33 4- 531 + + «65 4- 534 + *Z& 4- z37 4- «46 + 547 
W» + A21 4- JU3 + /a31 + h33 + It24 + fc34 +• =32 + 534 + v66 + *3S + 54S + 537 
+23S+*47+54S 

AOI+ Ml + ftG4-+W2+A31 + /fel4 + h32 + to4 + 531 + 533 + 1^7 + 536 + ^46 
+538 + 543 . . ... . - 

\ ^1 + &11 + ^1+Jk22+ ^ + 532+ 533 + z35 + 538 + 5454-1^ + 546 
[ ^ + frl3+/i22+hI4 + /t23 + ^+t61 + 242+z^ + 545+54fi+i48 ^ 

AOl + Ml + &13 + /i31 + A14 + h2Z + ^24 + v62 4- 541 + *43+ *44 + ^45+^46 
+547 

A02+&22 + M4 + /*32+fc24 + t«3 +542 + 544 + 545 + 546 + 547 + 548 
Ml + Wia + M2+/E21 + ^ + M3 + ^ + ^l4 + li33+h34 + s4i+t^l+542 
+545+547 

M2 + *21 + fe22 + HZl + ft 14 + A34 + jc41 4- w65 Hh 543 + 544 Hh *4$ + ?47 
Ml + &13+ h22+ fc31 + ft23 + A32 + 542 + v664- *44 + 545 + 547 4- 54ft 
hlL + h 12 + A21 + M4 + &^ + /t3 2 4- fe24 + ft33 + 541 + 543 + v67 + z 4 6 + *4S 
^ hll+h21 + jfi43+-/RH4-ft24 + h33 + 542 + 5434-545+v6& + 546 
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4-245 + 2464- *48 

hOt 4* h21 + hl$ 4- hZl 4- &14 + A23 + A24 4- u02 -I- v22 4* tal2 -4* *12 -I- 241 4- 243 
4*44- + *45 + *4S+ *47 

A02 4- A22 4- A14 4* A32 + h24 4- «03 4- ti23 + t*43 -tzl$ + z42 + £44 + *45 + 246 
Hh*474-248 

Ml + /i<*3 + hl2 4- A21 + AD4 + Itl3 4-A22 4- h!4+ /i33 4- A34 + v04 4- «24 4- ti44 

4- *4l 4- *42 4* 245 4" *47 
M2 4- A21 4- h22 4- A31 4- M4 + A3* 4- irftf 4- w25 4- *45 4- *41 4- 215 + 243 4- s44 
+246 + 247 

J*ll 4- A13 4- 4* &3i *r f*23 4- J*32 4- u06 4- i>26 4* »4£ 4- z42 4- 2 16 4- 244 4* *4t5 
+*47 + 248 

fcl i 4- M2 + ;i21 + hU + .623 4- >*32 + A24 + A33 4- vfT? + 1£7 + *4I + *47 + *43 
+237+z46 + z4& 

Ml 4- A2L 4* £134- A14 4- ft24 4- A33+ tiOS +*28 4- *42+ 243 4- 1*48 + *I8 4- 245 

f W>1 4- AU+AQB + A12+&13 4- A23 + A33 4- li^+irfll + i^ + trfl +*11 + *71 ^ 
+531 4- *32 + *34+ 235 + 245 + *37 4- 238 4- *47 + 248 

hJOl 4- &02 4- All 4- + &21 4- + A13 + M4 4- A24 4* &34 4- 1€2 + «22 4* w42 
+*12 + *31 4- i*72 + *32 4- 233 4- 230 + s4G 4- *38+ 248 

feOl 4- A02 + hOS 4- M2 + *21 4- &13 + A22 + A3I + &14 + v03 4- u23 + t*43 4- *I3 
+231 4- 232 + *73 + *33 4- zU 4- 235 + *45 4- *37 4- *47 

MJ2 + All + W2 4- hM 4- b22 + hU + A32 4- A33 4^ hM 4- «04 + «24 + »44 4- «31 
+*14 4- ^33 4- ti74 4- *36 4- =37 4- ^46 4- *47 .* 
mi + hit + ft03 + US 4- 4- H04 4- Wl 4- &33 + i*34 + t^5 + v^4-*31^-t>45 
4-=32 -f z4l 4- *15 4- *42 4- 234 4- *75 4- s35 4- »44 + i374- 

W)2 4- hVZ 4- 4- M 3 4- fc22 4- h3 2 + h34 «06 + + *3I + J?32 4- 241 + v46 
4-233 4- 242 4- *16 4- *43 4- t*7S 4- z30 4- «38 

Ml + M I + fm 4- A13 4- A31 4- ftl4 4- A23 4- A33 4- v07 + 231 Hh v27+ 232 4- 241 
4-233 4- 242 4- v47 + zM 4- 243 4- 217 4- 235 4- 244 4**774-237 

-r Wl + iW>3 + hU 4- ft32 4- h24 4- «3 4- tK)8 4- 231 + *41 4-*2S 4-r33 4*243 
v 4-C484- sl8 + 23G4- 237-f u78 ^ 
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hQ2 + hit 4- A22 + /<3I * &14 + A33 + &34 + t>72 + ^33 4- *38 4- »38 

M 1 + &03 + f*12 + ii23 + fc32 + ft34 + *31 + *73 + *34 + *35 + s45 

fcl2 + A04 + Ktt 4- A32 4- J*24 + ir31 4- *74 + *36 + *37 + *46 + *38 + * 47 4- MS 

ftOl 4- A02 4- /i03 4- h!2 4- &21 4* W3 4- A22 4- &31 4* fe32 4- 633+ *33 + 234 + z43 

+ttf5 + z35+*44+;836 + *37 

ft&l + h$2 + All + im + M4 + /*1 3 + h 22 + A3 1 + hi 4 + 1*23 + A32*A33 + A34 
+z34 + *35 + 344 + v76 + *36 4 z 37 + *33 

&02 + /*03 + /U2 + A21 4- fm + /*14 + A23 + /i32 + &24 + W3 + ft34 + *3l + z4 1 
+*36 + u77 + *37 + 2S8 

W)l + A02 + M i + M2 + fc21 + fc04 + A3! + h& + fc24 + ft34 + z32 + *33+*42 
^ +*34 + s43+z35 + *44 + *36 + t>78 + 238 y 

f " fcl2+ A(M 4- M3 + A32 + A33 + t>71 + *33 + z42 + *34 + 343 + *44 + «3g + *37 > 
+*38+*4T+*48 

toI + All + to3 + ^J+M4 + ^ + W4+ura + ^34+*43+z44 + ar37 + ^ + z4S 
&02 + hl2 + A14 + A32 + Ji34 + 4- «73 + 244 + *45 + *3S 
All + A03 + M2+&Q4 + A31 + fi32 + *32 + z4t + *33 + «42 + t>74 + + «43 
+s35 + *44 + *36 + s37 + z4& + *$8+ zA7 + *48 

ftOl + All + hl2 + &32 + &24 4- &34 + *3I + *32 + *34 + *43 + «75 + *44 + -*4S 
+*37 + *d6 + z38+ *48 

A02 + h\2 + A21 + hl3 + A3i 4- ft33 + *31 + 3r32 + *33 + z44 + vTS + z4S + 
+«3$4-z47 " - - " 

m4-m+M3+J^ + Wl4-fel4 + A32 + A34 + ^14z32+x41 + ^ + «34 
+535 + *45 + 1»77 + fi46 + z47 + «4S 

Ml4-?tW4-ft3l + Al4 + W+to4 + ^33 + A34 + ^31+*33 + jtf42+z43 + z44 
^ +^3e + z4$+i374-uni + r38+s47 j 



59 



+z44 4- z36 4 «37 4 238 -J- zd7 + 248 

Ato + All + Al34A3*4Al4 + ^ + ft344ta24v32 4t;524*#2 + *^ + 2^ 
4z44 4 537 4 *38 4 248 

A02 4 A12 + A14 4 A32 -5- ft 34 4 t>13 -I- i>33 + i*53 4 z31 4 trf» + 223 4 *44 + *4S 4 zSS 
Ml + A03 4 A124 A04 4 A31 4 A32 +vW+«34 4- u54 4 *32 4 zAl 4 t>64 + z£4+z33 
4*42 + 234 4 243 4 z35 4 244 4 *36-j- *37 4 246 4 *38 4 *47 4 *48 
Aai4fcll4Ai24?a24A24 + A344i?154*354^l4^ 
4*43+js44 4*45 + j#74*40+*384z48 

A02 4 A12 4 621 4 &13 + *31 4 J*33 4 v!6 + *3X 4 1£6 4 *32 + *33 -f t£6 4 *66 4 *26 
+«44 4 *45 4 zW 4 *38 4 *47 

All 4 AQ3 4 A13 + A22 4 7x31 4 hl4 4 A32 4 &34 4 trl 7 4 231 4 *32 4 24 1 4 *37 4 *33 
4 234 4 v57 4 235 4 t*67 4 z27 4 *45 4 *46 4 *47 4 z48 

AU 4 A04 4 A3I 4 AH 4 A23 4 A24 4 A33 4 f>34 4 s3t 4 wlB 4 *33 4 *42 4 4 *43 
^ 4244 + t>584*364z454^ 4*284 2^4 s384*4T 4 

f /^4AQ34A04 + Al3 + A224/tfl4A324/t334vU + t£l^ \ 
4z324*42+ z354 237 j 
hi 1 4- A03 4 AQ4 4 A31 4 A14 4* A23 4 A32 4 A33 4 A34 4 1?12 4 *32 4 1?52 4 *62 4 *22 
4t&24 2334*434235 4 2364*38 

Ali4&12 + A21 + A04 4A32 + A24 + A33 + A344t;13 + s^ 4**>34223 
4*41 4 *83 4 *34 4 535 4 #44 + 238 + 237 

AOl Hh A02 + AO* + A12 4 4 A04 4 A3! + A32+ faW+ vl4 4 134'+ z3l + 1?54 + 241 
+«64 + «24+ ti84 + 236 + 238 

M>l + A03+ Ail + A03 + A22-i- A31 + A32 + /f24+ fe34 + «a5 + t;3S + z31 + u55 + x33 

+ 225 + 235 4 vSS + *36 + z4a + 237 + 246 4 247 
tol + A02 4 AOS 4 A12 4 fc21 4 A04 + A31 4 A23 4 A32 + A334 til6 4 23X 4 *36 + 232 
4t«6 + 234 4 vde 4 226 4 235 4 236 + ^45 4 v®& + 237 + *46 4 *38 + 247 4 z4B 
AQ24 A034A21 + A04 4A13 + A22+A314A324A244 ft334A344 trl74 231 + 232 
4v37 + 233 4 vS7 4 vffT 4 227 + 236 + *37 4 246 4 vS7 4 23S 4 247 + *4B 
^1 4 A02 4 A21 + A04 4 A31 4- Al4 + A23 4 &24 + A33 4 t^lg + *32 4 «38 4 *34 4 2» 
k 4«5842364c454t«S4«2ft + 2^+z3S4t»SS4248 ■ j 



K&2 S3 



A84 = 



( 401+402 + 4n + 421 + 423 + 433 + 231 + tf$l + 24l + *33+243 + 23S \ 
402 + 4D3 + 41 2 + 421 + 422 + 431 + 424 + 434 + 2 3 1 + *32 + 241 + *82 + 242 + *34 
+z44 + z3G 

401*403 + 421 + 404 + 413 + 422 + 431 + 423 + 432 + 231+332 + z41 + 233+242 
+*83 + z43+237 

401 + hm + 422 + 414 + 432 + 424 + 232 + 242 + 234 + 1#4 + z44 + s38 

411 + 412 + 421 + 404 + 422 + 431 + 423 + 432 + 424 + 433 + 434 + z32 + z33 + 234 
+u85 + z38+248 

401 + 412 + 413+422 + 423 + 432 + 424 + 433 + 434 + z33+z34 + 235 + z45 + *86 

402 + Ml + 413 + 414 + 423 + 424 + 433 + 434 + 234 + 236 + 246 + 1?87 
All + 403 + 421 + WW + 422 + 431 + 414 + 423 + 432 + 433 + 231 + *32 + *33 + z34 

^ +237 + z38 + 247 + »BS + 248 

( ^+^l + MJ4+m + ^+fe32 + A24 + W4+«81 + 241 + 243+235+236 \ 
+237 + ^46 + 247 

401 + 402 + 422 + 431 + 423 + 424 + 433 + ^41 + t#2 + s42 + 23$ + *44 + 236 
+245 + 237 + x38 + *47 + *48 

402 + 403 + 431 + 1*23 + 432 + 424 + 434 + z4l + *42 + %m + 243 + z3 6 + 237 
+246 + 238 + 248 

403 + M1 + 1^+431 +423 + 433 + 4^ + *42+^ + 235 + ^ 
+*46 + 238 

422 + 414 + 424 + 433 + z32 + 234 + 243 + vB5 + *48 
511 + 421 + 431 + 423 + 434 + 231 + 241 + ^33 + 544 + 245 + t>86 

412 + 421 + 422+431 + 432 + 424 + *31 + *32 + z4l + *42 +- 2$4 + 246 + 1/87 
\^ 421 + 413 + 414 + 423 + 432 + 424 + 231 + #33 + *42 + 234 + 247 + vBS + 248 J 

f 4Q1 +421 +404 + 422 + ^ + 432 + 424 + 434 + trtl + ^ \ 
+24 1 + 243 + z35 + 230 + 237 + 246 + z47 

401 .+ 402 + 422 + 431 + 423 + 424 + 433 + p02 + «22 + t*42 + *12 + 1>72 + a41 
+z42 + 235 + 244 + 236 + 245 + *37 + *38 + z47 + z48 

402 + 403 + Ml + *23 + h& 1 + h24 + h34 + + w23 + 1*43 + 213 Hr z41 + ?j73 
+242 + 243+ 236 + 237+ «46 + 238 + z48 

tm + 421 + ^*22 + A31 + &23 + ^*33 + /*34 + v04 + »24 + 1*44 + zl4 + z42 + «74 
+235 + 244 + 236 + 245 + 246 + 23S 

422 + M4 + h24 + 433 + «05 + tr25+c45+ 232 + 2J5+234 + 243 + tr75 + 248 

411 + 421 + 431 + 423 + 434 + ^00 + *26+ z31 + z41 + »46 + 233 + zi0 +244 
+t?76 + 245 

412 + 421 + 422 + 431 + 432 + 424 + «07 + s31 + v27 + 232 + 241 + z42 + 1»47 
+234 + 217 + vT7 + 246 

42 1 + 413 + 414 + 423 + 432 + 42 4 + *08 + 231 + v28 + *33 + 242 + z54 + v4& 
\ +2l8 + n7S + z47 + 24S 
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K9i = 



4*x344- *36 4- *37+ z46 4- + *47 + z4S 

AQ3 + A21 + M3 4- h22 4- 1*32 + h24 Hh w02 4- »22 4- «424- *124- r31 4-t;724- *32 
4-*33 + »92 + <s37 4- *3B + z4?+ *4a 

itf)l 4- U 4- A21 4- &D4 + te2 + ftl 4 + ft 23 -I- A33 4- t#3 + v23 4- t>43 4-zl34- *31 
4-*32 4- »73 4 *33 *34 4- s?93 + z38 + *43 

/tOl 4- All 4- &22 + /i24 4- fc34 4- «04 + v24 4- »44 + *31 4- zi4 4- *33 + t>74 4* z35 
4-«94 4- *36 + js45 + *37 4- *46 4- *38 + *47 4- *48 

ZiOl4-^ + M24-A044-tol + M44-fc324-*33~/^ + «45 

4-*41 4- 2IS + cTS 4* ^35 4- 4- *38 

AQ1 4- A02 + Ml + A03 4- M3 4- **32 4- A33 + A34 4- vOC 4- 1S6 4- z32* u4<*4- *42 
4-si6 4- 335 + 1>78 4- z36 4- t#S 

MH 4- A02+ Ml 4- hQ3 4- M2 + fc04 4- M4 4- fc33 4- fc34+ *07 4- «27 4- *33 4- »47 
4-243 4- »17 + «36 + ti77 4- s37 4- u97 

*Ot + ML 4- im 4- M3 4- HZl 4- M4 + Iv32 4- «3 4- vt&4* ti28 4- *34 4- v4& 4- *44 
^ 4-zl84-z37+*78-ra93 y 

/ fcOl 4- Ml + fc03 4- &21 4- M3 -f *32 4- *9i + z35 + z36 -h 4- *46 \ 
ftOl + ft02 4- Ml 4- M2 4- &04 4- fc?2 + hU 4> *33 4- v92 4- *36 4- z37 4- z4$ 4- * 47 
fcOl 4- *02 + Ml + M*3 4- M2 4 M3 4-*23 + ^31 4- z34 + v93 4- r35 4- *45 4» z37 
4-z384-«474-*48 

&02 + M2 4- fe04 4- M4 4- h24 4- *31 4- «35-f ^94 4» *4$ 4- «38 4- ^48 
hOl 4* MX2 4- Ml 4- h)Q3 4- Ma + hOi 4r M3 4- ^31 4- M4 4- ^1 4- z32 *41 4- js42 
A'Sfe 4-*364-t95 + *38 - 

602 4- ^03 4- M2 4-A04 4- M3 4- M4 + /*32 4- *32 4- jc33 -f *42 4- *43 4- x^4-z37 
4-t«6 

/i03 + iHD4 4- M3HKM4 4- ft33 4- »31 + 5f41 + ^33 4- »34 4- »43 + *35 + *44 4- z36 
4-z384-v97 

Ml 4- ft024- Ml -f Al» 4- M2 4- M3 4- &34 + z31 4- *4l + z34 4- 4» z44 4- z37 
\ **384-t&8 * : - - " 



Then, the next step S103 is executed to carry out a 
variable transposition process. With the results of the 
vectors Kll, K12 , K13 , K14, K21 , K91 and K92 used as 

a base, the simultaneous linear equation is transformed 
so as to result in equations, which each include only 
terms zxx and vxx on the right-hand side thereof as 
follows . 
[formula 34] 
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klti « vil + z21 

Alls =*15 + *25 
*li7 = *17 + z27 



Ml + &21 + hl3 + felai = t)13 -rz32-r 242 

Ml + &12 + h22 + M4 + M22 - ©12 + *33 + 243 

Ml + h\2 + M3 + A23+ M» = «13 + ?31 + *41 + *34+ 244" 

M2 + M4 + &24 + fcl 2 i =■ ul4 + *31 + 241 

A01 4- hQ2 + + *04 + ft31 + Mm »1& + 238 + 246 + 23S + 248 

&02 + h03 4* h04 + A32 + Map = vl6 + 235 + 245 + 237 + *47 

*03 + &04 + htt+kirr = «17 + 235 + 236 + 545**46 + 238 + 248 

601 + M)2 + /iC3 + /jl34 + fcl M « *I8 + 235 + *45 + s37 + *38 * 547 + *4S 
AOl+AOa-^ trl 1 + 242 4- 235 + 236 4- 245 4- 2*6 

Ml + /t02 * + H» » *>12 + #43 + 236 + 237 + 246 + 2*7 
K0l4-h024-Wi3+kls, - i>l3+241+z3&+2<U4-245+237+2$&+247+z4S 
fe02 + «)4 4- M34 - v 14 + 241 + 235 + 245 4- *38 + z4B 
Ml + M2 + M3 + ^14 4- Jfeljs = t> J 5 + *3l + 232 4- 241 4- 242 + *46 4- *48 
M2 4- M3 4- hU 4- M 36 = »16 4- 232 + *33 4- 242 4- 243 4- 245 + 247 
M3+M4+M37 = vl7+231+241+233+234+243+*44+245+246+ 248 
M 1 + M2 + M3 4- z31 4- *1 3ft = 0I8 4. z41 + *34 + *44 4- 545 + 247 + s4& 
hOl 4- MB 4- kUi = t;01 4- 2U 4- 242+235 + 236 + 245 4- 246 
Ml + MF2 + + feUa « v02 + r!2 + r43 + 23S+ 237 + 246 + 247 
AOl +^02 + ft03+W4a ^= v03+ 213+241 +^35 + 244 + 245 + 237+r38 + 
»47+248 

602 + hm + fcl4< « vOA + 214 + 241 + z35 + *45 + 238 + 248 
m+/a2+fcl3+£U+fel4S » tKS+z31 +232+ 241+Z15+242+246+24S 
&12 + US + A14+ feLes = tm + 232 + 2^3 + 242 + 216 + 243 + 243 + ,547 
hl3 4- Ail4+ kUr = tK)7+ 231 + 243 +233 +234 + 243 +217 + 244 + z45+ 

246 + ^43 

611+/a2+M3+^l4fl = iX»+231+241+234+244+3lS+24$+247+ff48 
kZu - t<Ql +v21 + zll 
fc2ia » ©02 + «22 + 212 

Jfc2is«t , 03 + «23 + 2l3 . . - r":.. 

k2 l4 - t>04 4- v24 + *14 

fc2xa = «05 + 1*25 + zi5 

fc2 l6 = t>06 + «>2S + 2I6 

A£i7- f07 + t?27 + 2l7 

Ic2ia = t>08+ + 2I8 

ii03 + &12 + h21 + A31 + &23 + *2 ji = u21 +231 + 232+234+236 +237 + 
240 + 23&+ 247 + 243 

h03 + Wi+M3+im+«2 + M4+W» = i^ + 231 + 232+2^ 
236+247 + 248 
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f&l + hl\ + b&l + h04 + h22 + M4 + h23 + + fc^aa ~ V23 + *31 + 
*32 + r33 + jc34 + *38 + z4B 

Wl +M1 4- fc22 * ft24 A2 2 a » t£4+ *31 + *33+ *35+ *3G+ *45+ 

*37 + *46 + *3& + *47 + *48 

fcOl + *G2 + &12 + A04 + Wl 4- A14 + A32 + A33 + A34 + &2» » i?25 + 
*31 + z41 + z35 + *38 

ftOl + A02 + All + A03 + M3 + &32+A33+A34 + 1:226 = *26 + z32 + 
s42+*35 + *36 

A01 + A02 + fell + &03 + Al2 + A04 + M4 + A33 + A34 + fc2 a7 m *27 + 
233 + *43+*36 + *37 

^01+All+W)3+/iI3+A31+M4+/ia2+ft33+Jk2 2S s »2S+*34+*44+;s3? 

A01+ftU + Ai2+A31+A33 + &2 3 i « i>21 + *32+ *4 1+^33 +*34+*43+ 
*35 + *36 + *37 + z4& + *3S + z47 + *48 

A02+ A12 + A13+ +A32 +&34+&2» « i*22+s41+ j?33 +x42+ *34 + 
z44 + *3& + *37 + *3ti + z47 + zdg 

Jill + A03 + A13 + A31 + A14 + A32 + A33 + *2 M = «23 + z4l + *42 + 
*34 + «43 + *37 + *38 + *48 

All + fc04+M4+fc32+A34 + te»»tr^ 
*35 + zte. + j?36 + *45 + *37 + *46 + z4J + *4S 

A01 + AM 4- All + A21 + A22 + M4 + A23 + ft24 + *23S = if25+*3l + 
*32 + *41 + *33 + *34 + *3S+ *48 

&02 + All + &G3 + A12 + fc22+ M3+ &24+ *2*« « t£6+ *32 + z33 + 
*42 + *34+x36 + Jr45 

A01 + A03 + A12 + *04 + Atl3 + A23 + A24 + k2sr « t*27 + *33 + *34 + 
*43+*37+*4G 

fc01+A21 + A04 + At3+A22+A23 + *31 + 232^ 
^3S + ~47+z43 

ftOX + hi 1 + A12 + A31 + A33 + *2 4 i = vil +*21 + «32 + *41 + z33+ ^34 + 
^43 + z35 + z35 + ^37 + + s3S + «47 + *48 

^+/il2+&13+A3l+A32+/i34+i^42«vl2+^+*41+^3+^ + 
*34 + s44 + z36 + .£37 + 238 + ^7 + *4S 

Ml + ACO + M3+K31 + M4 + ;i32 + A33+fcZi a = ol3 + ^23 + ^4l + 
^42 + r34 + r ^ + r37 + z38 + ^48 

All+/KH+/a4 + A^+A34+fe2 M ^ol4+«3l + ^+j^4+^33+^42 + 
+ 4r35 + ^44 + 536+^45 + ^37+ ^46 + r4T+ «48 

mi + ft02 + hi 1 + h21 + h22 + hU + ^23 + h24 + Jfe243 « vi5 + *3i + 
z32 + r41+^33 + 225 + z34 + x35+248 

WK+ A11+ /*B3+ *12+ W2+ fc23 + A24 + fc2*a x= «16+ ^32 + s33 + 
x42 + zM + z36 + «36 + * 45 
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hOl + iiOS + hl2 + A04 4- kI3 4* k23 4- A24 + fc2 4r = trt7 + *S3 + 234 + 
243 + z27 + z37 + z4G 

hOl + fc2i + hOA + M3 + fc22 + ft23 + 231 4- &2« - + ^32 + 233+244+ 
22&+*3a+*47+*48 

ttu ~«ll+*31+*?2 

Ar3i> = vl2 + t?32 + r22 

fe3 5s » «13 + i>33 + *23 

W lf i>l4 + *34 + 224 

itSis = wi5 + 1735+325 

Jt3is = vlfl+*3S + z26 

*3iy =5t>l7 + »37 + r27 

&3 W a v!8 + *3& + r28 

M» + fcQ3 + ^4-M3 + /^+7i31 + A!32 + &33+ *3aa » v3l + *32 + 

242 + z35+z37 

*33 + ^43 + 235 + 236 + 238 

Ml + M2 + ^l + ^ + ^2+/t24-f-A33+ft34 + Jb3 23 = u33+*31 + 
Ml + zM + z35 + 244 + 236+ 237 

AOL + /i02 + MB + A12 + h2l + *Q4 + ft31 + M2 + *34 + Jk3*i » *34 + 
231 + 241+236 + 238 

A01 + AO2 + fcll + AO3 + /£? + «1 + A32 + &24 + A34 + Jfe3* 5 » *35 + 
*31 + 233 4- 235 4- 236 + z45 + *S7 4- *46 + *47 

MI 4- M2 4- WS3 +M3 4 A21 4- M>4 4- ft31 4- fc23+A32 + h33 +231 4- *3s« = 
v36 4- 432 + ^34 + *3 5 + s36 4- *4S 4- *37 4- *4S + 238 4- z 47 + 248 

^4*ftQ3 + A2i+^ + M3 + A22+A31+^ 
^32+ *3 2 r = *37 + *33 + 236 + 237 + 246 + *38 + *47 + z4B 

MX + £02 + /i2l 4- MM + fe31 + *14 + A23 + fc24 + A33 + *32 + fe3» = 
*38 + 234+235+236 + 245+246 + 23a + *4S 

wii + m, + h03 + tei + mi + h.22 +l*3i + *3 3 * = t&i +"2*2 +235 + 

238+247+248 

h<32 + 603 + feOi + *22 4- *23 Hh ft32 + A3« ±= t£2 4- ^3 + x3S + 2^ + 2^ 
ft03+/i21+;i044-A23+7i24+/a3+ir3 3 3 v33+241+244 +236+24S+s37 
hO 1 + hB2 +7i03+ A21 +h24+ fc34 +jc3^ = t?34+241+ 237+ 246+247+^48 
M 1 + &12 + «S1 + M3 + 624 + It33 + 634 -f &3as * ts35 + 231 + 234 + 

243 + 244+ *4& + 246 + 247 

&11 + kl2 + h2l + A13 + &22 + M4 + ?i34 + *31 + A^36 » *3G + z32 + 

244 + 245 + 246 + 247+248 

fcl2+M3 + /i22+Ai31 + /ll4+A23+232+241+Jk337 = v37+233+^46+ 
247 + 248 
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hi 1 + + hi 4 + 623 + 632 + 633 + 634 + s33 + *42 + Us* - v38 + 
z43 + z44 HE- *45 + z46 + ^48 

601 +602 + ft03+ 621 + 604 + 622 + 631 + Jk3<, = trf)l + *2l + *Ll + 
z42 + z3S + *38 + *47 + 1 *48 

602+ h03 + 604+ #£2+ 623+ 632+ fc342 * *D2+v22+*12+z43+r35+ 
£36 + 748 

603+ 621 + 604+ 623+624+ 633 + = t03+ a23 +5l3+z41 +*44+ 
*36 + *45 + *37 

601 +602 +603 + 621 + 624+ 634 +£3*4 = i<04+ *5W +zl4+ *41 +r37+ 
z46 + z47 + *l8 

Ml + 612 + 621 + 613 + 624 + 633 + 634 + fc3*s .« t<8 + u25 + *31 + 
*1 5 + ^34 + *43 + x44 + *45 + x46 + jt47 

61 1 + 612 + 621 + hl3 + 622 + 644 + 634 + k3 A5 » u06 + t£C + *31 + 
*32 + *16 + *44 + *45 + *46 + s47 + x 48 

612 +613 + 622 +631 + 614+ 623 + Jb3 47 = v07+ »27+*32+ i41 +*33+ 
*17+*4G+*47 + jr43 

fell + 612 + 614 + 623 + 632 + 633 + 634 + £$4* = «08 + «2S + «33 + 
*42 + *43 + *44 + *lB + *45+;H» + *48 
Mxa»¥01 + «'2i + v4l + *ll 
Ar4is « v02 + «22 + + zJ2 
fc4ia » + 1*23 + t?43 + si 3 
*4i4 = ttf4 + <*24+i*44 + sl4 
*4ia~t?G5 + i ? 25 + v45 + 2lS 
fc4 ia =t>06 + t£6+ t4G+*16 
Mir = w07 + v27 + »47 + 817 
Jb4xs a uOS + t*28 + v4ft + ilS 

A01 + Ml+/i03 + Al2+^ + h23 + ;^+fcW + Jfc4 1 i ^= 1*41 + ^1 + 
+ «34 + «3S + 245 + z37 + jr38 + «47 + z48 

feOl + WK2 + MI + M2+ hltl + A04 + &13 + hU + 1124 + ^34 + 4:41^ = 
f^+33i + 232 + r33 + ^36 + *4S + ^3S+z48 

&01+ fm + WJ3+ M2 + A21 + &L3 + &22 + hSl + &14+ JWjr = *43 + 
^1 + «32 + *33 + J34 + * 35 + *45 + ^37 + *47 

ft02 + &1 1 + &12 + im + h22 + A14 + Ji32 + ft33 + h34 + kA ^ « i?44 + 
z31 + 233 + *36 + ^37 + ^46 + js47 

Wl + Ml + /i03+/il2 + ^l + J^ + fc31 + j^ + &34+^l + ^ « 
t>45 + *32 + ^41 + z42 + *34+ r35 + **A +^37+ «38 

h02 +M2 + MA + Al3 + /t22 + 632 + A34 +231 + z32 + *4t + k4^ = 
p46 + s33 + 242+543+z^6 + 238 
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h01+fvU+W>3 +M3 4- Ml + hl4 + h23 * fcJ34- *3l + z32 + *41 -I- 233 + 
242 + k4.tr =*v47+ 234 + z& + 235 + z44 + 2*7 

W#+Ml+h03+hl4+/^+/i24+A33+231+241+z33+243 + M^^ 
1*48 + 236 + 237 

*Q2+ft04+&13+/a4+/i33+ A34 + *4 31 = v41+23I+233 + 242+ 234+ 
*43 -I- 236 + x45 4- z37 + *47 + *48 

fc01 + AQ3 + M4+^+ib432 - ^ 
237+s46 + z38 + z48 

fcfll + *02 + fell + hS4 +h3l + Jb4aa = t*43+231 + 233+242 +244+ 236 4- 
*45 + 238 + *47 

AOl + £03+ &12 + A04 + M3 + &14 + A32 + &33 + ft34 + U M «44 + 
*32 + *41 + *33+ *42 + 235 + *36 + *46+ 247 

hOl + A02 + All + A03.+ &21 + WJ4 + A22 + A31 f A23+&34 + fc4 35 - 
w45 + *32 4- 241 + 233 + 242 + z35 + z44 + 236 + z46 + 233 + 247 

h02+A03+M24-/m+/to4+&224-tol4^+Ji32+/i^ 
«4S + 233 + 242 + *34 + 243 4- z35 + 236 4- 24 5 4- 237 + 247 + s 48 

h03+fcO44-J*13+k22 +A23 + A^+?i34+fc33+232 + z4t +*42+&4a7 = 
t>47 4- «84+ 2434- 235 + 244 4- 236 + 237 + 245 + 233 + 248 

*01+/ia2+*Q34-/m+*i32+hl4+ta44-M^ 
»4S+ z35 4 z45 + *37 4- *46 

fc02+frfl4 + A034-&14+fc33+ *34 + te u » tll + t*31+221+*3l+z33+ 
242+*34^243+236+245+z37 + 247+24& 

fcjl 4- tm + &14 +&34 +*4« » t?12 +*32+222+ 232+ 241 +234 +243 + 
235 + 244-f 237 4-246 + 23S + 248 

fe01+/i02+/ill-h/l044-^3I+Jt4 w -vl3+t)33 4- 231 + 223+*33+z42+ 
244 + 236 + 245 4- z38 + z47 

hO\ + M» + 1*12 + hU + W3 + hlA + *32 + + It34 4- H44 «■ *U+ 
w34 + 232+s41 + 224 + 2334-242 + 235 + 2^G + $46+247 * 

ftOi + + *11 +M3 + A2I + fe04 + *22 + A31 + A23 + A3* 4- JW45 = 
via + t*35 + 232 + 241 + 233 + 242 + 225 + 235 + 244 + 236+ r46 + 238 + s47 

m+/«034-M2+m+M)4+h22+h31+^23+^32+^24 + M4s - vl$+ 
z3l4-i?36+^41 + 233^242+234+ 243+226+235+236+245 +237+247+248 

MB + hM + *13 + M2-+ ii23 + fc32+ 7*24+ ft33 + fc4 47 = *I7 + *32 + 
*41 + v37 + 242 + z34 + 243 + 23S + 244 + 227 + 236+ 237 + 246 + 238 + 248 

hOl + kQ2 4- «i3 + A21 + A22 + A.14 + A24 + + 231 + *4*g = viS + 
232 + 241 + *38 + 243 + 235 4- 245 + 228 + *37 + 246 

JfcSn = vll + v31 +u51 +221 

JfcSl* = wl2 + *32 + 1*52 + 222 
« t»i3 + t»33 4~*53 +223 
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fc$i5 = v!5 4- v35 + + s25 
*5iC - v36 + t*56 + x^G 

IrSiT = t*17 4- w37 + r£7 4- z27 
k$xs = ul$4-tC8 + »58 4-323 

fefl2 + &21 4- M34- fc224- fc23 -r Jb5 31 = v$l 4-*334- *344- *434« *44 + *37 
m^034-/i21+ft22+M4+/i23-{-&24-J-J6:52 S = tf524-2344-*3S+z44+*38 
feQl+/ai-i-M2+/<04-|-h22^/i23+h24-rfc32 3 s *534-*3l4-*4H-*354-*36 
Ml 4- M2 4- tol + h22 + &24 4- *5a4 w54 * *32 + *33 + z42 4- *34 + *434- 
i44 4-*36 

A02 4- A03 4-M24- A2I 4- MM 4- M3 4* J*22 + M4 4- /x33 4- 634 4- *5*s * 
u55 4- *33 + *36 + *46 

A034-^44-M3+^+ftl4+A234-to4+«31+i{:52B » va6+«34 ^37+^47 

^4-*(fc4^l4-M44-/i23 + h244^14-*324-i^ 
2384*248 

AQ1 + ME 4- Ml 4- M»+ M2 4- h2I -f hO* 4- M3 + M4+ hZ2 4-&24+A33 4- 

&344- *324- $35 + kS w * u58 -K z4& 
&02+W2+ftO44-^13HhA23H-W2+^44-^34-4-iS:53 1 « t£l4- r434-*444-s47 
AG1 +M1 +WG4-ftl3+;j31 -f ^144-A24+W3 4-*5^ t£2 4*2444-*454-*48 
MU + *02 + M2 . + &21 + J*04 + A31 + M4 4- A32 4- fc34 4- *5» *= t>53 + 

*41 4- s4S + 2:46 

1*54 4- z42 4- «43 4- 344 4- *46 

M I 4- &2l 4- M4 4- fe34 + kS^ m + *43 4- *46 
Ml 4- M2 4- hS2 4- A31 4- *41 4- fcSao m v5G 4- *44 + z47 
A12 Hh M3 4- /»23 4- ^2 4- z4t + z42 4- ^5»7 = «57 4- ^45 4- 
M3 + A24 4- &33 4* fc34 4- *42 4- fcSg* a i£a 4- *45 

A02 + M2 4- &M VMS 4- *23 4 h22 4* 6244- 634 4- *5 4 i = 501 '4- v21 4- 

v41 4- *U 4-z43+ *444- *47 

A01 + Ml 4-603 + M3 4-/i3l4~M4 4» &34 4- A33 4- tto » «92 + p224- 

t^> zI2 4- z44 -f z45 4- «4S 

/tQi 4- ^02 + h\2 4- 1^21 4- MM 4- ^31 + M4 4- *32 4- A34 4- fc5« " 4- 

v23 4- v43 4- sl3 + «41 4- *45 4- ^46 
A01 + Mi4-^4-M2+6044-^+li31 + ^4-^244-^4-^ = 

tf04 4- 1«4 4- 1>44 4- 4- «42 4- *43 4- ^44 + z4Q 

Mi + /i2l4»M4+^ + Jt5 t5 =t^^t^-hy45 4-2l5 4-e43 4-r4G 
M 1 4- M2 4- A22 4- A3 1 4- fc$4B - «<» 4- «26 4- ^41 4- *464-*164-*44 4-*47 
M2+M34-fe23+ii32+fe5 4 T = tf074-t>27+z4l4-z42+v47+^74-«454"«48 
jM3 4- &24 4- h3& "4- &344- fcSig s» tH)S 4- «28 4- ^43 4- v48 4- *18 + 5545 
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/*024 &2I 4 hl3 4- fc22 4 Ji23 4 fc6n » vll 4 v31 4 tfSl 4 i#l 4 221 4 z33 4 
2344243 4*444237 

Jdl 4 W» 4 /i21 4 h22 4 4 W23 4 /*24 4 Jfe6 14 = i?12 4- *32 4 v52 4 
u62 4 z n 4 *34 4 *35 4- s44 4- 238 

hOl 4Ml4hl24 A044 &224/i23 4/1244*6^ = *13 4 c33 4 v53 4 
*31 4 «G3 4 *23 4 *414 r35 4 s36 

Mi 4M24 &214A224 A24 4iWu = trt4 4 *344v54 4*32 4itf44 224 4 
233 4 242 4 *34 4 * 43 4 244 4 236 

h02 4 &03 4 *12 4 h2l 4 &04 4 M3 4 A22 4 &14 4 &334 A344 fc6i 5 = 
*>15 4- v35 4 *55 4 233 4 v65 4 *25 4 *36 4 *46 

M>3 4 MM 4 &13 4 A22 4M4 4&23 + A34 4 fc6ia » i40 4 zZl 4*36 + 
v5S -I- 234 + v66 4- 226 4- z&i 4 *47 

^4fc044A3l4ki44fc234ft244lte 1 7=rf7+itfl4^ 
235 4 1*37 4- 227 4- 245 4 $38 -1- *48 

J*34 4 fcSid « ^134 *32 4 t£8 4- *35 4 v58 4 245 4- *6& 4228 

h014^4Ml4hQ34Jtl24&044fcI44Ji234fc62i = vd 4 *32 4 
*33 -I- 2:42 4- 243 4 *35 4- *36 4* 238 

MJ24- ftll 4- M84 &L2 4 &21 4- fc044 hlZ 4- &24 4* *6» = *62 4*314 
*41 4 2#3 4 *34 4 *43 4 2?35 4- *44 4 *36 4- *37 

Ml 4 A03 4- hl2 4- &21 4- MM 4- &134 h22 4 *14 4 *6*i *63 4 *32 4 
24242344z354*44423642374*3$ 

&01 4- 602 4 Ml 4&03 4 fi.134 /i224*31 4 2324*414 Jb6a4 - »W+ **2 4 
*354*37 

&Q24/U2 4- A22+ &23 4*33 4 *31 4 j;334- A:S25 = w05+3344*364-*37+ 
js46 + t47 

/*C3 + *21 4- 4- *3I + ^23 4^24 + /t34 + 4-^34 + k&n « *664- 
i35 + 2r454-237 + «38 + «474-24S - -- * 

fc01 + m4-^4-*22 + «l4fel44-/^^ 
t;67 + 236 4- jt46 4- 2=38 4*46 

ft01+Ml4~I£l+A22+^+ 

M24 W>i4-Al34 ?<22 + W44ft23 4-A344fc6 3 i » «61 4- z42 4 z43 4 
2454246424,8 

hOl 4 4 ^03 4 Wl 4 fc!4 4 A23 4 *24 4 fc5 S2 = *62 4 241 4 M3 4 
244 4 245 4 z46 4 z47 

/t024/t224M44ft324^244fe63s « t^34i4242444245424642474*4S 

Ml4^4fel24/^l4«)44M34-/i224M44^4W442414l:6 3 4 = 
«64 4 2424 2454247 

M24A214/1224 Wl4hl44h34424l4&635 = «6S 4^43424442464247 
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m4fel34A224fm4A234fci24z424*&3a - trS64z444z45-h2r474*4S 
Ml 4 A12 4 A21 4 Al4 + A23 4 A32 4 A24 4 A33 4 z41 4 i43 4 £637 = 
trfj7 + z4G4*4£ 

MH- A21 + A13 4- A14 4 h24 4 A33 4 *42 4 *43 4 *45 4 ft6^ = «6S 4 z46 

A12 4 A04 4- A13 4 A22 4- Aj 4 4 A23 4 A34 4 = t€l + *1\ 4 v41 4 
sll 4- r42 4 z43 4 z4S 4 *46 4 z4S 

AOl 4 A21 4- A13 4 A31 4 AH 4 A23 4 A24 4 fc6*2 » u02 4 t£2 4 *42 4 
a \2 4 *41 -f z43 4 *4 4 4- z45 4 z4fc 4 z47 

A024 A22 4- AU4- A32 + A344 » *034 *23 4 1*434- *134 *42 4 z44 4 
z45 + *4G4«474z48 

Al 1 4 AQ3 * A12 4 A21 4- A04 4- A13 4 A22 4- A14 4 A33 4 A34 4 fc6« - 
vM 4- v24 4- 1«44 4- z!4 4- z41 4- *42 4- s4S 4- *47 

W2^WJ4-^^Ul+M44-^34 + M4s = xOS4-v254*i>4S+z414-zl5^ 
*434z444*4G4z47 

fen 4- hvs + 4- toi 4 fca» 4 as* 4- fcfc « = «4tf> 4 V2e4u464z424zit>4 

z44 4*45 4z474z48 

All 4- A12 4- A2l 4- + A23* A324 A24 4- A33 4- *6 4r » wQ7 4 1?274 
Ml4t*74**34-zl74-r46-M4S 

A114A214M34A144A244 A334-J&4* = ijQ84i^4-z424*43 4w484 
?13 4*454 *46 

A01 4- All 4- A034- A124-A134- A23 + A334A34 4- k7tt -*jG14*214 
*41 4- ill 4 vTl 4- sSl 4 *32 4- s£4 4 »3& 4- z4S 4- *37 Hh *3& 4- z47 4* z4fc 

A01 4 A02 4 All 4- A12 4- A21 4- A04 4 A13 4 A14 4- A24 4- A34 + *7u s 
*02 4 t?22 4 «42 + zl2 + z31 4 1>72 4 *32 4- z33 4- z3S 4- z46 4- z3S 4 s48 

A01 4- A02 4 A03 4 A12 + A21 4 M3 Hh A22 4- A31 + W4 4- itTts — u03 4 
«23 4 »43 4 ^13 4- is31 + «32 4 ^73 > z33 *34 4- *35 4- z45 4- *37 4- z47 

A02 4 All 4 hl2 4 A04 4 A22 4 Ai4 4 ^ 4 A33 4 A34 4 Jk7 14 =>04 4 
t?24 4 «44 4 z31 4 *14 4 z33 4 v74 4 z36 4 z37 4 *46 4 z 47 

A01 4 Alt 4- ACQ 4 A124- Ml 4. AQ44- ftJl 4 A33 4 A344 &?t& - «0S4 
t&5 4 z31 4- 1?45 4 z32 4 z4 1 4 *13 4 z42 4 *34 4 tr75 4- z35 4 *44 4 *37 4 *38 

A02 4- A12 4 A04 4 A13 4 A22 4 A32 4 A34 4 *7 M = 4 v26 4 z31 4 
z32 4 r41 4 u46 4 233 4 z42 4 zU 4 -43 4 v76 4 z36 -h ^38 

A01 4 hi 1 4- A<» 4M3 4 A31 4 M4 4-/4234 A33 4 Jb7, T = vEJ7 4- z31 4- 
ti27 4- *32 4 *41 4 z33 4- z42 4 *47 4 zZ4 4 *43 4 zl7 4 ^35 4 *44 4 1>77 4 z37 

A024A114 A034-A144 A^4A^44A334 Wis m t08 4 z31 4 z41 4 
t?284-z334z434v4a4rl8 + ?304z374tr78 

A01 4 A21 4- A13 4 A32 4 A334- Ir7 31 m v7l 4- ^324^ z37 4^33 4 *47 4 z48 

A02 4 Ail + A22 4 A31 4 A14 4 A33 4 A34 4 1:7m .» *72 4 r33 4- ?3S 4 z48 

AZ 1 4» A03 4 A12 4 A23 4 A32 4 A34 4 *31 4 k7& a «73 4 z34 4 *33 4 *4S 
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M2+^+m4-te24ttW+23l4-*7 2 4=* »744236+2374-2464z384- 
z47 4- 248 

&01 4* A02 4 £03 4- hl2 4- A21 4- hl$+ Jt22 + &314-/i324-A3342334-2344* 
^43 4- = v75 4- z3S 4- 244 + 236 4 237 

h014fc<K+Jm4-M34A<M4-At34-A22+&3l^ 
h34 4- *34 4- *35 4- 2*4 + *7 55 = *78 4- *36 4- *37 4- *38 

fc02+M34M2 + tal4AW4-M44/£34*A324-A^ 
z41 + s36 4- k7zr — «77 4- *374- *3* 

A01 + &03 + MIL 4- + hM 4- *31 + &S24- A24 +A344-232+ 2334* 

242 4- 234 4- *43 + *35 4- z444- 236 4> jfc7 28 «■ v7& 4- 238 
* fcl2 + W4 + /*134> &324-A334 fc7*i = trTL+2334- 2*24- $344 2444- z*A+ 
*36 4- 237 4 *38 4 247 4- 248 

Ml 4 Ml + M3 4- A31 4- U4 4- 633 +.434 4- fc7-si = u72 4 *34 4 *43 4- 
*44 + z37 + z38 + *48 

AD2 4- h\2 + M4 + A32 4* /*34 4- *31 4- *T» = «73 + *444- 24$ 4 *38 

fell 4- ft03 4-&12+ £044* &3l4- *32 4 232 4-241 4- *33 4 242 4- *7j4 ~ 
«74 4- *34 + *43 4- *35 + zU 4* *36 4- *37 4- *46 4- z3& + 247 4- 243 

6014- Ml 4^M2 4^24-ii24+ ^ 4 z3i4-232 4-534+2434'K35 = 
*75 4- z44 + 245 4-*37 + *46 4- *38 4- *48 

&02i-hl2 + A2H-&13+/»31 4-^33 4-231 4^ ^32 + ^33 4 244 4*fc7 3 * = 
v?6 4- 245 4 z4B 4- 238 + 247 

334 Hh 235 + z4$ 4- *7 3r * t*77 4- *46 4- 247 4- z48 

W 1 4- A04 4- &3 3 -h &L4 4 *23 + A24 4- A33 + &34 4- 23 1 4~ 233 4- 242 -h z434- 
«44 + 23642454-z37+Jt7 M ^ v7S^-23S4-^47 

AJ 2 4 hOi 4 &13 4- h32 4- ft33 4" £7^i = pi t 4* v31 + «51 4- 1?61 4- 221 4- 233 4- 
s42 4^ -=344-2434- z44 4- 236 +237 + z^4- 247 4- 248 

hOl + hll + h\3 4* Wl 4- A14 4- A33 4- ft34 4- kl& m vl2 + i^Q 4- + 
t>62 + 222 + *34 4- 243 + 244 + z37 4- 238 + *48 

lt024-hl24'M44ft32+Jb344-fc743 «= el34-v334-»53 + 23i-ht^634-2234- 
^44+ s45 + *38 

MlH-^ + /zl2+Jif>4-;m4W24Jfc744=^l4 + r34 + i^^^324^l4 
^64+2244-2334-242+^344- i:434-2354-2444-2^4-237Hh*4642334-2474-24S 

W)l + M1 4 hl2Hhii32 +&24 + ^34 - rl54-ir354-23l 42324-t:&5+ 

v65 + 225 + J534 4- 243 4- «44 4- 24& 4- z37 4- 246 + x38 4- z48 

«Kl4-ftl24 ft2l-fftl3+A31 +h&+k7 4B « tfl6 +2314- tj3ft+ 2324-2334- 
«56-hv66 4 226 4- 244 4- 245 4- 246 4- 233 4 247 

Hll -r lrf)3 4- *tt3 4- fc22 4- U31 + Iil4 4- ?<32 4- A34 4 ic7 47 « vl7 Hh 2^14- 
232 4 241 4-1374-2334- »344 «574- 2354-^67+ 227 4 z45 4 24642474- 248 
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Ml + M14+ A31 + M4 4- h24 + h3S+ + 531 + fe7« - vl& + 
533 + 542 4- CS8 + 543 + 544 + irS8 + 536 + z45 + *68 + 528 + 537 + 538 + «47 

A02 + *03 + /*04 + M3 + &22 + A31 + fc32 + A33 + *8,i = «11 +«31 4- 
vSl + v61 *f 521 + vSl + 532 + $42 + 535 + z37 

All + A03 + A04 + A31 -I- M4 4* A23 + A32 + h33 4- A34 4- AS** = trl2 + 
ti&2 + t»5 2 + tiG2 + r22 + 1£2 + z3 3 + *4 3 4- *3 5 + *3G 4- z3S 

Ml + M2 + A2I + A0<S + Ji32 + A24 + A33 + A34+ *8ia - tfl3 + *33 4- 
v53 + z31 + v63 + 523 4- £41 + i£S + *34 + ?3S + *44 + *36 + *37 

M>l + fc02 + AG3 + M2 + /i2I + A04 + A31 + &32 + /i$t + *8;u - t>14 + 
v34 + 531 4- v54 + $41 + t/64 + z24 + tiS4 + z36 + z3S 

fcOl + A02 + M I + AG3 + A22 + A31 + £32 + A24 + A34 + *8 15 a vlS + 
v35+z3L +t&5+533 +vQ5+ *2S+ s35 +t?85+536 4- 545+537+546+547 

^ + ACra+^ + M2 + /t2I+m+A31 + /tf3 + ft32 + A33 + fc8 18 = 
tr!6 + 531 -fuffi + z32 4- t?5G + z34 + «i66 + *26 4- z35 + 530 + 545+ v8$+ 
^37+ z46 + *38 + 547 4- x4& 

h02+«B+A21+A(M+M3+^+tal+&32+/i24+A33+A^ = t?!7+ 
531+532+T>37+533+tf57+tJ67+227+53(^*37+546^^^^ 

m + *O2+fc21 + fe04+tal + M4 + &23 + A24+^ 

totf+A02+Ml+tat+A23+/*33+531+fcS2i = tS I +541+333+543+ 535 
A02 + A034-M2 + /i2l 4- A22 +/i31 + 1*24 4- A34 +*3l 4-5324-541 + ^8»« 

w82 4 z424-^34 + 544 + «36 

iiOI 4- ii03 + A21 + &04 f M3 -h A22 + 4- A23 4- A32 + z31 + 532 4- 541 4 

533 + 542 + ifcS» « nS3 4- r43 4- 537 
ZiOl4-^4-A224-M44-h32+/i244-3324-542+534+*S 1 4 « t844-5444-538 
Ml 4M2 + A21 Hhh044 &22^A31 -h&23 +A32 4- &244-A334-A34+z32+ 

Ml + M2+M3 +A22+ A23+m+/t24 4 A33+ ^ 
z45 + fc$ M =«86 - " 

A02+Ml+M3+Ai4+;m+A24+A33+fc34+534+536+ 5464^837 ~ ^87 

Ml +iW)3 4- «1 + h04 + &22 + &31+ M44 A23+h32+ A33+jf31 + 532+ 
«33 + 234 + $3? + z38 + 547 + ^833 s «88 + 548 

AOl + J^l + MM + J^a + ^+toa + ^ + l^ + fcSa! = ^1 + 541 + 
543 + 535 4-538 + 537 + 546 + 547 

hQl + hG2 + /i22 + A31 + A23 + A24 + W3+ 541 + fc8» s «S2 + r42 + 
*35 + 244 + r30 + *45 + 537 + 538 + 547 + z4% 

M&+b03+ft31 + A23+fe32 4-&24 + fa34 + 541 + ^42 + ^33 « t?83 + 
543 + «3§+ z37+ 546 + 538 + 543 

hV* 4- *21 4- A22 + A31 + A23 + A33 + fc34 + 242 + ^34 m v&4 4- 535 + 
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z4 i + m 4- x4 5 + *46 4- *3S 

«22 + M4 + hM * 4- *32 4- z 34 4- *43 4- *S» <= *85 4- *48 

Ml + h2\ + J*31 4- h5Z +- A344- *31 + z4l + z33+z44 4-*454- JfcSas = v86 

M2+A21 +A224- k3l4-ft324^244.*31 4- *32+*41 +s42+?M+ ^46+fc8 3r « 

t#7 

hQl + h21 + /i(M4-/*22 + /^+A32 + /t24 + ^-f Jfe8« s uDl4-t£l + 
©41 + t?H + z41 4- *43 + *35 + *3C+ r37 4- r46 + *47 

;i014>A02 + /k224- Wl + AZX + /^24+h33+i«o - + »22 4- ©42 + 
*12 4- *»72 + *41 -h s42 + *35 + *44 4- r36 + *45 4- *$7 -f *38 + r47 + *48 

A02+&Q34-fc3l4-fc234-A32-h&244- hte + kSa = «03 + **23 + v43 4- 
* 13 4 z4 1 4- t>73 4- *42 4- 4:43 4- *36 4~ *37 + *46 4- *38 4- *48 

£03 4-fc21 + A22 4-W1 -rh23 + h& + hM+k844 = *04 + «24 + vU 4- 
2X4 4- *42 + 1?74 4- *3S> + *44 4- *36 4- *45 4- + z38 

A224-M4+fc244~J^-r*a« = iX)54*«/254-<f454-*324-*15+*34+ *43+ 
«7$4*z48 

All + fe2l 4-&3I4- fc23-hfc344- fcS^ = *06+ tf26 4-*31 4- *4i 4-t>464- *33 + 
*164-ft44 + tr764-«45 

M2 + A21 -f 4- h2l 4- 4- h24 + k8rr = 1,-07 + *31 4- *274-s32+*4l4- 
*42 4- *474- *34 4- *17 4* *77 4- «46 

A21 4- M3 + hU + fa3+H32+H2A+ *8«j ~ t*38 4- s31 4- 4- x33 4- *43 + 
*34 H- v43 4- *18 4- v7S + sAl 4- «48 

MJ2+&I24- fe214-/*31 **frtf = «0l4-ti21 4- w«4-Jffll 4-«71 +jt3I 4- 
*32 4- toOa 4- «344- «36-h «37 4- *46 4- *3S 4- *47 4- *48 

+ A21 Hh M3 + /i22 4- il32 4- A24 + k9 « = »02 4- 1;224* tpi2 + ^1 2+ ^31 -f- 
t?72 4- z32 + x33 + v92 4- a37 4- i3S 4- ^4 7 + J^48 

fc0l 4-Ml>A2] 4-A04T^2+M4 + ^3 + A33 4-Jtl) u = »03 + ?>23 4- 
1?43 4- if 13 4- «31 + 132 4- 1?73 4- *33 4- ^34 + v& 4- j38 4- *48 

W)l4- fill + h22 + *24 4- 1*344- J^u ■ ufct4- 1?24 + 1^44-^31 4- -5144- *33+ 
v74 + ^35 + v©4 + «36 + *45 + s37 + z4&+ *38 4- ^474- a48 

fcOl 4- A02 4-M24- WW+/*314-M4 + -f + ^ + fc9 l& = ^-05 + 
v2S4-231 + t-454-241 + 2l54-i?7S4-s35 + ti>5 + 538 

JiOl 4- ft02 4« Ml 4- &03 4- ft!3 + A32 4- 4- /»34 4- « tK)6 4- «26 4- 
2324-v464-^4-^164-£35i-o76 + ^36-hr96 

iiOl 4- A02 4- Ml 4- A03 4- M24» 504 4- M4 -H h33 + W4 4- JtD 17 = «07 4- 
i?27 4 ^33 4- n?47 + ^43 + «17 4- *36 4- »77 4- ?374- v$7 

hQl + hll ± M3 + hW + + H14 + h32 + + ten = ijOS 4- t»2S 4- 
«34 4-i^48 4- *44 4- «18 + *37 4- uTO + v98 
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hQl -h AL1 + h03 4- h2l 4- M3 4» *324- k&2% ~ v91+z35 4- *36 4- *45 4- *46 
Ml 4- &Q24- fell 4- M24- JtG4 4- k22 4- Jrt4 + *33 4- kO^ = v92 4- *36 4- 
*374-?4G4-z47 

W>1 4- fcQ2 4- U 1 + A03 4- 4- M3 + *23 + *31 4- *34 + »93 4- 

*3S 4- *4o + *374- *38 4- *47 + z4S 
h02 4- M2 + hQ4 + &14 -I- A24 4- z31 4- *35 4- JbS M « t&4 + z45 4- *3S 4-243 
Ml +M2 + Ml + A03+M2 4*A04 4- M3 + £31 + M4 -f-*31 +*32+ *41 4- 

s424- js364-A^ ^ v£©4-*38 

M24-^4-M2+M44-M34-M44-m4*^+*334-M2+^^ 
*37 4- Jfc^ - t^6 

6fl3 4- /a#4 + 111 3 4^ Alt 4- A33 + z3l 4- * 41 + ^33 4- 534 4- «43 + *35 4- z44 -f 
236 + *38-hfc$27 = v97 

M)X + tt>2 4- Ml 4- hm 4- M2 Hh M3+&34 + *31 +*4l + *34 4-*3S+*44 4- 
3374-*384-A9 28 = i>fJ8 

Then, the next step S104 is executed to carry out a 



matricial-equation transformation process. In this 
process, vectors K, H, U and V are set as follows, 
[formula 35] 



K- (k In, Kl 12 , . . . , k 9^) 
(hO 1, hO 2, '. . , , h44) 
U= (z 11, z 1 2, v » «■ , z 4 4). 
V= (vO 1, v 0 2, . . .« v 7 4) 

With the vectors K, H, U and V set as expressed by 



the above equations, the simultaneous linear equation can 
be transformed into the following matricial equation, 
[formula 36] 



It is to be noted that, in the above equation, 



symbols M K h and Muv each denote a GF(2) matrix comprising 
coefficients of the simultaneous linear equation 




75 



described above. 

Then, the next step S105 is executed to carry out 
unitary transformation process. 

Let symbol N r denote the rank value of the matrix 
Muv as follows : 
[formula 37] 

rank (M uv ) = N r 

Then, let symbol N m denote the number of rows 
composing the matrix Muv- By multiplying both the left- 
hand and right-hand sides of the matricial equation by a 
row-deform unitary matrix Q from the left, the matrix Muv 
can be deformed into a step matrix. In this process, a 
small matrix consisting of (N m - N r ) lowest rows of the 
matrix QM 0 v becomes a null matrix. 

Then, the next step S106 is executed to carry out 
small-matrix selection process. Let symbol M* K h denote a 
small matrix consisting of (N m - N r ) lowest rows of the 
matrix QM K h. In this case, the small matrix M*kh becomes 
null matrix (0) as expressed by the following equation, 
[formula 38] 

M*kh = O 

Then, the next step S107 is executed to carry out 
linear-relation equation generation process. This 
matricial equation is transformed into linear-relation 
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equations, which are each associated with a row. Then, 
actual values are substituted for hOl, h02 , "•• and h44 to 
obtain the following relation equations: 
[formula 39] 
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OtHG ss kin 4 kin -i- fcl» + Arl^r + **3i + fclai 4 fcl37 + fel^a 4 k2 33 4 

0r9c =s Mta 4* fclzj 4- &1» + fclss -4 Jtiaa + + kl& Hh Jfci^ + fcl M -r 
fcl 4l + 4 fe2i i 4- *2, # 4- 4 *2i4 + *3 t3 4- kS& 
Qx<tf =Ja l4 + 4 felas + 4 4-*2u + fc2ai 4- fc3 2 4 + 

-4- + *2 S « 4- *2i 8 Hh *2 2 5 + *2 2S 4 AS, a + ft3» 
Qar23 = fctia + fcl^a 4- fcl M + fcl*y -f fel^ -4- fcl^j kiss + fcla? + 

*145 + kU7 4- *2 15 4- *2 17 4- A2» + *2 zr + &*is 4- &32* 
0x60 = Mir 4 *l2i 4 W» + fell* 4- Ma 4- kizt + *1» + Jel^i 4* Jbl» + 

fcljM + *lss + *l37 4- fcls* + k I4S 4- Hh fcltf 4- &2 1S + *2 10 + *2j* 4 fc^fi 4 
A^4-Jfc2i 8 H-fc3i7-4A3 77 

Gscrf =* fel j * 4 *la 4 Mas + *1*4 4- Alas + Jfclw + *1 si 4 fclaa 4- M34 4-* las + 
fcl^+*l43 4fcl47+*l48+fc2i:>4fc2 ir ^^ 

0*34 s fclu4-M*4+fel274-fclift4-fcl3i + !^ 
I5I43 Hh ktta 4- fc2ij 4- fc2 ]a 4- *2 ia + 4- *2» + *2fci 4 4 M tt + &4aa 

0*90 = *rlaa 4- kl^s + + Mar 4- 4- fclaa + felaa "4 hl& 4 Iflat 4- 
kl*B 4-Jfcl« Hh fcl4a4- Jfeltf + *1*7 4*14* + Jfe2 l5 4 &2«s -4*2 l7 4-*2i 8 4 k2 71 4- 
Jb223 4 *22a + War 4- &22a + ft4 u + Mji 

0*^1 « fcl^ 4 4 kl^r 4- Jbl tt 4r JUsa + fclas + Mir 4* ttas + fcUi4- 
W43 4- «44 4- kUr + Jkl-m 4- Jfe2n Hh *2u + fe2 lT 4 fc2, 8 + fc^i + fc2i4 4 fc2a* 4- 
fc2» 4 fc2aa «4 Mia + k4^ 

0x80 a Hh Jbls 4 IcIsa 4- Has 4- + *1« 4- Jfeljs 4 tlti 4- 

4- A1 M 4 lcl« 4- 4- ifettr + k2u + fe2^ 4- Jb2 1<? 4 fc2 17 ^hfc2 li 4fc2i3H- 
fc2a I 4 4- fcfcsa 4- ^228 4- Jb2„ Hh 4- 44 a4 + 4- Mm 

t>^39 « Jfel a5 + 4- Jkl^i 4 Jkl44 -4 4- kU? 4 4 A2 U 4 fc2j2 4 
^4 -4fe2is4-l^i« 4-fc2tr4- A2 lB +ife2 21 + Jfc2j44- fc3» + fc2«7 4 fcdia 4 

M,6 + *43aHhfc43c 

te2d! - M» Hh kiss 4 «4i -4 kU% 4- iklie + 4- -4 4 fc2i 3 4- 
AS W + k2i 7 4 A2i» + *2« 4- fc2?s 4 Hh A2aa Hh *4$a 4 h4 t7 4 ^3 4 *4 aT 

Oa<0 - &l 2r Hh Al» 4 felar 4- Wag 4* kU* 4* fel^s 4- + A2« 4 fe2 w + 
*2i5 + Jb2w 4- *2te 4- fe2 M -h Sfiis + *2 Z9 + fefe u + fc4« + Jb4« 4^ Waa 

Ox/a = felss + fc^as 4- fcl*i +■ 4- ^Ur + ^2n 4 ^2i* + *2ia 4- fc2 M -|- 
*2iT + *2« 4- 4- *2a 7 4- *4n 4- *4i5 4 fe^i + M» 

0o39 » fcl 41 4- M«a 4- feUl 4- Jblto 4- hUs -4 fc2 J5 4- *2u 4 Jk2 17 4 4- 
*2»+ A2244 fc2» -h fc2» 4- k2& +Mu + fc4»-f *4m 4 t4 ie +ib4i 7 4 3W W + 

0»35 = fcl 4 ? 4- 4 fcl 44 + Jkl4» -I- *l4* Hh AI47 4 *2u + + ^is + 
*23ti 4- *2» + fc2» 4- Js2a$ + fc2» 4 *2* 7 + k2si + 4 1 4 Jt4i« 4 fc4 M + 
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k*u 4- W 17 + Jb4 3 i + H» 4 + kiss 4 *4ar 

fc2*t fc2« 4 fc2»+M2w 4-&2a$ +k2 9 z+k2 tr 4 J&aa +*2ai+*2»+IW n + 
kAvi + fcija -h fc4i 5 4- Hie 4 *4ia 4~ kA$\ 4 k4& + kizs 4 M35 4 k* 38 + &*as 
0acc7 - 4 &Ua «f fcLr? -I- &I 4 8 + *2u + *2i2 + *2ja + *2i$ 4- &2i 8 +■ 
*2ja +t&2* + &S?w 4-&22S + fete 4-*4« -H*4ia 4 &4ia + 

fc4i4 4 +■ * 4 i6 4 *4it 4 Jb4 3 i 4- Jb4a2 + H33 + ^» 4**35 + ft4as 4- A^ar 

*3 n 4- *>4» 4- JW M 4- A4 J4 4 *4 W 4- W32 4-Maa+WfcM + 4 *5 U 4 *5»i 
ftwffi a Ai^ + AL|7 4- fe2ia + Wi4 4-*2n 4- *2*2 4 *22S 4 k2 2 r 4*232 4 

Jb3ja 4- Jb4u -r fc4 M 4 fe4 IC 4- £433 4- ktj* 4 JU^ 4* *5 J2 + ib5» 
0*8/ - *1 4T 4 *Ub 4* *2n 4- k2t* 4- *2u + *2i S 4* *2i« 4 *2i 7 4 fc2si 4- 
4 fc2 M 4 *2*r 4- fc2** 4 *2a t 4 *2» 4 &2 W 4 fc3u 4 *3ia 4 *3i 4 + fe4 u 4 

*4u 4 M M 4Mij 4- 4-*4 18 4*4*1 4 ft4» 4*434 4*4 3S 4 Mm 4 

*5tt + *5« + tt M + fc5a 3 4*& M 4- 
0x83 fcl 4 *4-*2u+J&i44**2it4-*2i0+ 

*2*8 + A231 4- ^32 4- fc233 4- *3u 4- fc^j 4" fe3»+M» 4 *4 14 4- Wis 4- M w + 

M 47 4M;n4*4W4M334-*43c4-*^ 

0*00 = fc2„ 4 *3 U 4- fe4u 4 *4 3t 4- *44i 
0*00 = kZ lt 4 *3u + Ss4*2 + M&* 4 *44* 
0*00 a fe2 w 4 *3 13 4- *4» 4 4 -*4« 

0x00 * ^fe^M "I" ^3l4 + ^414 + 4 

0x1/ = ib2 I5 +*2it+I£» 4-&222 -r fefcu 4 fe2*s 4-*r^2 4>fc233+i2b4 4-A2a 5 + 
*3„ 4^ i3 4M 1 34«i44Mia4-ic4iT4-A4 a& +^ 4Jt4^+^ 4 

Ox&e » *2 ia 4 fc^ir 4 *2i« 4 £2*2 + %s + *2*6 4 Jfe2j2 4 ^2aa 4 A236 4^ 
fc3 u + Mm 4- 44ir 4- 4 &4so + 4 kias + *44t 

Qz63 = *2$t 4- iSis 4- 4:223 4- kZ^ + 4- + 4 ^37 4 fc3ia -I- 

Qx3S « fe2 w 4 A2ai 4- *^24 4- fc2a 5 + *^2t4^ fe2aB + ^ai 4- 1:2^4 4- *s23s 4- 
k2sr 4 J^24S + &3* a + Jk4„ + &4 3B + fe443 

Cfer42 = fc2» 4 A2» + ^26+^ 4-1^14- Jfc2 32 4- ^ 4 &2as 4- ib3n 4- 
*Si4 + Ib3 16 4- fc44! + Jt444 4- feUs 

0xe6 = fc2 w + *2 M + + &2« + J&ss 4- Jfe2» 4- fc2a& 4 1 ^ + fc3u 4- 
*3i2 4 ft3ie 4* fe44i 4- k4*2 + fe4 46 

0*91 = &2«3 4- *2 M -h *22s + fc233 -r Jfc^4 + *^36 + &3i2 4 + Ifi3 w 4- 
4 Jb3« 4- fe3i» + *4*2 4- kfiui + fe444 4- ktts 4- fe4 4ft 4 M« 

(te^) » fc2 24 4 k2n 4 *534 4 fc2 3 ? 4 &3is 4- *3u 4- kZ%$ 4- *3is 4- Ar3 w 4 

*4«> + *444 + ^ 4- ^146 4- *4 47 

OtoO ^ fc2aj 4 4 fcSss 4 Ar23« 4- &3u 4- fc3u 4 fcSis 4 4 feSii 4- 
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&5i3 4- kSn 4- fcSis 4- fe5« + A5aj 4- &S 24 4- *5*5 

OxbJ = fc2 M +*22a4- ^ + fe2aa 4- A3 I2 4-*3i3 4 *3 A4 +*3is4-*3* ? 4-fe44i + 
fe4*4 4- fc5n 4- 4- + ±5is 4- fc5 ie * £5*i 4- + 4 jfe5 2S 4- 

0x07 - Ar2zr + 4- i^r 4- 4* kZ u + *3u 4- *3t 5 4- A3i« 4- fc3 l7 4~ 
fc44i 4- ^442 + Jb4 44 4- feSw 4- *5is .+ + *5*? + *5» 4- feSas 4- 4- fcSiy 

Oxcl = ^5«+*2 5 s4-^3ii4-i^i«4-^ie4'ik3 ie 4-*3ir4-«ia4-A-44 1 +&4«4- 
A:443 4- &5t3 4- fcSis 4- Jh5i 6 + fc5 17 4- k5 t9 4- *5m 4- + 4- War 4- *5i« 

OartS = *2 4 i + *3n + 4- fc3i 3 4- &3ie 4* 4* *3 2l 4- Ha 4- fc*42 + 
Asiaa 4- &447 4- fcttji 4- &5« 4- k$ w 4- Uu4 *52i 4- *Si$ + S&m 

Oared = U2 A2 4- ftfa + fc3i2 + Jfe3*a 4- fc3j 4 + Hm*+ *3it 4- &3is + W» 4- 
Jb4 4 i 4- Jb442 + 4- 4- Mm 4- *5« 4- &&ts 4- JfcSur 4- &5» 4- A5» 4- *5 2 7 

Ots/6 = *2*3 4- *3ia * fc3, 3 4- i#i4 4- + *3 W 4- ^ 4- + kfa + 
1:4*4 4- fc445 4- fcSta 4- fcS^ +• &&n 4- &Sia 4- 4- 4- fcS^ 4- fcSia 

ax4G = ^444-teu4-fr3 M 4-*3i4 4^^ 
fc44s 4- fc44T 4- M4S * *5j 4 4- fe&is 4- fcSjr 4- fcSxg + £5^ 4- ^ + ^4^ 

(Ml - A24S 4* «n 4- k3 J4k + k3 l5 4- fc3 is 4- &3 it 4- k$ u 4- 4- Ma 4< 
Hi* 4- fciw 4- fc4 4 » + ^4fc5u + &5it 4* *5;a 4- fc5 M 4- fc5* 7 

0x29 = 4- fcSu 4- £3*2 + fcSjkfl 4- &3tr 4- fe3 M + *3m 4- fciii * feta 4- 
M44 4- Jbft« 4- M47 * iSj 4 . + fc5is 4- Bh 4- £5*4 4- fc5w 4- 

0x85 = k2 Ar 4- fc*ia 4- *3i3 4- *3j7 4- £3 is 4- fc3*r 4- Mu 4- ft442 4- ^^43 4- 
M» 4- ^446 + fc*4* + + 4- fc&ie -h + fco» 4- feS^ 

Oa«» » *2 41 i + Uu 4- *3is 4- J&up 4- Hu 4- fcSaa + ^4 42 4- + M« 4- 
*44T + **4S + t5i2 + fc5 13 4- *5i* 4- fc5i6 4- fc5n 4- ^ 4- fe5«4 + Jt5» 

OxTf>» fcSji 4- fc3ia 4- Jgift + ib3 1T 4- *3 18 + + fe4 4 i + A443 4 &5i 0 4- 
*£i7 4- tew + *5as 4- k&n 4- fe>2g 4- ^41 

Oxlb = fe3 j S 4- &3i* ife3i4 4- i3ia Hh Jfc4n 4- Uu 4- + Jbl^a 4- ife444 4- 

4" ^^2© 4- ^541 4- X^43 

0x6c - kSn 4- fc3i4 4- fc3rr H~ 4- 4- fe4<s 4- H44 4- %7 +*5tt + 

fc543 4"fcS43 

0*53 « «i4 + tew + fc3ia 4- M» 4r + fe4 u 4- Mu 4- &5i* 4- 4- 

J^4-J£98 4h£54i4-*Stt + *^ 

0x04 m fcJis 4- fc3iT 4- &4u + 4- U n 4- 1W« 4- fci 4 X 4- H** 4- Jt4Us + 
k4 4 s + fc4 4T 4- fc443 + &5n 4- JbSu +»w 4- feSis-f *5at4-StS 44 4-3b5 26 4- 
fc54* 4* feS^i 4* ^5843 + A&4S 

Ozcf « A3 ltf 4- fc3ir4- &$is 4- Jb4l 14 ; + H» 4* fe4i« 4- fci^ 4« *444 4- h4^ + 
fc5u4Hfe5 11 + ^u4-^t 4 ;4-lr5 l r4-fe5 1 B4-Jb5 fi + ^ 
fc5w 4» ife54t 4- i54s 4- ib&45 

OarSS = A:3i7+A5«4-Jb4u 4- ^4 I6 4-fc4 ir 4-Mu+*4 4 3^4«-rt5 u 4-^i34- 
A5is 4- fcStr 4- *5* 8 4- tea 4- 4- *Sie 4- JfeS^r + feSas + *5 U 4- feS* 4- fe54 T 
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0x2i = kZn 4 fe4 22 4- 4- *4i T + *4is + fc^i 4 M42 4- &444 4 £4fr 4 

kSi 1 + Ir5i2 + fc5l4 + fc5t7 + &«>i$. 4 fcSjl + 4522 + kfci + £§27 + &>28 + ^42 + 
A545 + A 047 4* &U$ 

0x37 = k3 7t 4 fc3*i 4 *4,i 4 k4 %7 4 *4u -j- fc4u + *4i* 4- *4 lt 4 *4, 8 4- 
W41 4- M44 + ^Us -5- *4*7 4 **i t + + £5is + fcSxt 4-*5ai 4 fcfcu + tSss + 
££37 4- *5 4 i + *a42 4 4 Atom 4- A^ fi 4- *5 4r 4- 

ftwtf » *3*2 4- fe3 3 a 4 *4 U 4 fcj ia 4 M14 4~ fe4i ? + &4ia 4- fc4*i 4 fcU* 4 
M45 + kAtfi 4- His +*5 U +*5i2 + fcSis + fcfiju 4- 4 *5 n Hh fe5« +fc&2s4- 
&>2S 4- JrSaa 4- k$47 4 ^&43 4 £044 4- 4547 + *5«4s 

Qj£b as fclss 4- &*33 4- i4ia 4 *4i4 4-*4j8 +foi«2H- feUa-h Jfe4 4S 4 His + 
*4 4T 4 &5 13 4 4 *5 1S 4- *5 ie 4« tStT + feSi» 4 JfeSaa 4 itS^ 4- A5 20 4 ^27 4- 

A*>43 + fc$44 4 &>4B 

0*51 = ^ 4- fe334 4 *4 U 4 *4i* 4 ^4j 3 + fc4^ 4 fe4*e I- M i7 + &<i* 4- 

4 1*4*^^4$ + ^13 4 4-^4- 

4- fcS^s 4 fcSifi 4 *&47 4 fc54B 
0x4ft « *^4i^4fc4t* 4-fc4 l4 4-*4i C 4 i:4 ir -f Wut^ 4*44g4-*4<*74- 

0x9a = Jb3i7 _+ + W w 4 jfe4 l2 4- Hu + fc4j« h ^3 4- fe^e + &44* 4- 

+ 4* fc5i§ 4- tS^a 4" &>2s 4 ^52a 4- fc5 4 a 4- 4- 4- &5a» 
0cc2 = 3b3aa 4- Jkftai 4- fc4n 4- ^4 W + *4 14 4- kdts 4- k4u 4- fe4 i7 4 ^4^ + 
fe444 4* Wis 4 k44& 4- ArSu 4- A^ l5 4- fcSia 4- ^^24 4- A5« 4- 4- Jt3 4 i 4 fcS 4 » 4- 

fc&44 4 ft5« 4 k$4& + A&47 + *5« 

0r72 = fc3 4 i 4- *4 14 4- fc4 l8 4- M31 4 M43 Hh fc447 '+ -r feSii 4 fe5i3 4 
k&air 4 ft5 4 i 4 *5«4 4 A548 

0«t2 ^ *343 + ^4 U 4- Mis + 4 AJ44i 4- 4- ^45 4- fe4« 4- Jk5 u 4* 
IsSia 4 ibSu 4 4 AS^t 4- ASa* 4 &5as 4 fcSaa 4- k5<ti 4- J6S44 + 

0£S8« £3*3 4- M« 4- fc4i* 4 k4& 4- 4- fc44a 4- fe445 4- fe44« 4 *5 U 4- 
4- *5is 4 *5ia + *5st + A5» 4- + JfeSac 4 £5^ 4- ^§43 + ^ 

0x56 b fc344 4 A4i3 4- feiu + *4ir + *4i« + ^34 4 ^ 4v*4 w 4^ Jb$ t2 + 
4 JfeSa 4 fcSw 4 k$& 4- ^47 + 

OxfiO = Jb34S 4- *4i3 4- *4 i4 4- A4iB 4 feti* 4 fe435 4- ^43 4- fe4« 4 fc4 4T 4 
ifcSil 4- *&ts + 4- 1^33 4- fcSaj 4- ^7 4- fcSo 4 ^43 Hr 45^ 4- fc5 4B + 

Oxda = kSts 4- fc4 n 4- M13 4 fc4 u + ^15 4- k4n 4 443« 4- jk4 4 * 4 Jfe443 4 
^« 4- ^45+^4*4^4- i£5i34-fc5u 4- fcSift 4^5i»4-fe5«4-fe53s4fe5i44- 
kojs 4- ftSa -h *54i 4 *543 4 AS** 4- A5&45 4 feS^g 4 *5 4 7 

0xc7= fc3 4T 4-i:4 IZ 4' Wi* 4- ^3 4- 4- ^4i B 4- ^37 4- felo 4 W44 + 
M43 4- fc44« +fc5» 4 *S 14 4- fe5 l3 4- t5 xe 4^^522 4 fc5 2 4 4- fc523 4 fc5« 4fc5 4 » 4 
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fc$4i + &5i5 4- feo45 4- khij 4- JkS^s 

0*2e « A&n + 4* k4 u 4- *4 l$ 4- Mi 7 + &4i 3 -h jb*s S 4- &4 4 i 4- *4 4 3 4- 
*4 4$ + *$ u + 4- kS is 4- 4* fc5« 4- £5^ 4- 4- £5*2 4- feS^s + A&17 

0«5c - fc4 lt 4- 4- fe4 t 4 4- *4, a + fc4i 6 + *4i 7 4- fc4ia "4- &4 4 1 4- fci^ + 

fe544 + *54S +- A54fl + AS47 4- 4- *Cu + &>31 

Qxe9 = fc4 l2 4- *4i 4 4- fe4** + *4 17 4- *4| 8 4- fctti + ^5 4- 4- W*7 4- 
fcSji 4- *5j5 + ^17 4- fc$2t 4- fcSjj -r kSte ^fcSzr 4-^ 4**544 4- S&m + fc5<r * 
fc5« + *6ta 4- 

0*66 « Jfc4» 4- Jb4 u 4- fc4*& 4- *4ia 4- *4 4t + Jb4« 4- H43 4- 4- i5 u 4- 
fcSia + fc5i4 4- fc&is 4- 4- fcfei 4- fcSas 4- fcSas * *5« 4- &S44 4- ^45 + *5 48 4- 
4- fr©u 4- £632 4- 

0x94 *4 M 4- Jb4 J6 4- fc4t* 4- *<n + A4 4 * 4- M43 4- 4- ^45 4- fc$n 4- 
fc5i4 4- fc5i$ 4- k5 zx 4- *5» + 4- tti* 4- *5» 4- k$u 4- J3«4-*54fl 4»*0 U 4- 
fcSxa 4- fcfiji 4* £633 

0x8/ h Jb4 11 4- fe4i* 4- U41 + JHu 4- Mo 4- 4- 4- *5« 4- &5 22 4- 
Jc5aa 4- k5s4 4- fcS** 4- hS** 4- &6, 2 4- *Gi 2 4- ££13 4* *6i4 4- 4- Jfcftn 4* £632 4- 
>6aa 4- 4-^635 

Orlb = *4 16 4- k4 ir 4. fc4 42 4- k4^ + ^444 + feSis 4- ^$22 4- AjSaa 4- fc5*4 4* 
Hh £5*7 4- 4- fc6i 3 + 1^4 + *6 M + A632 4- 4- ^^34 HH A^sfl 

0x48 s fc4i74-k4i84-fc44>4-&4<3 4- k5 1 s+kS l e+kStb+k52>i+k5 t 3+k5t 7 + 
fc54« 4- k&\t 4- 4- fc6t* -r fefiie 4- fc6 m 4- fc6a 2 4» ^63^ 4- fc8*s 4- fcS^e 4- JbS^ 

0»2S = l:4is 4- 4- ic4« 4- W44 + Ar5 l5 4- ^16 4- fc5i? -f 4- t5 M 4- 
fcS^ 4- *^4$ 4- + fc^Hs 4- fc6j 4 4- 4* 4- 4r fc6ai 4- 4* ^634 4 rt 
fcC»34 4*ft63$4-WW 

OfflOO «> Jtfji + Ar4 31 + fclic -h ^Sse Mis 4- fcSas 

0x00 » H» + + fc4« 4- 4- Jfc^g 4- JfeSge 

QsjOO* *4aa -hM^ 4- fclir + ^37 + ^17 4- kSrt 

0^ = fe4 24 4-^34 4-^8 + l^4-A6is4-&62ia • • " 

OrOO = k4as 4 4- + ^21 /c6 u ~ A^ 31 

0x00 = fc4g|Q 4- A:^ + /rli2 4- + ^12 ^ 

Oz^==LJb4 a7 H-M ai + fe443 4-Jb5 2 3 ^*6 13 -fJfc6 23 

0x00 = Jb4 a8 4-&4 2M 4-M 4 4- +fc5a* + k&\A 4- 

Os76 * M41 4- M43 4- 3k5itt 4- feStt + -ttia 4- *5ai + fc523 +■ fc54S 4- *©n 4- 
fc6j3 4* fe6i$ + *6i7 4- ^6i# 4- l^bi 4- ^633 4* -fcSaa + A637 4- fc6as 4- £64$ 

Orli = 4- W43 4- fcCt 4 4- + fcS^a 4- Ic5» 4- i&u 4- ^645 4- U<s 4- 
Jb6i a 4- ^613 4- Wfr|4 + ^6ie 4* ^632 4- £633 4" ^834 4h ^630 4* A64S + ^6«6 

ttdbc s= fct^ 4- lr444 + *5i7 4- feSn 4- Jk5 24 4- ho#> + fc547 4- J2613 + AC14 + 
&6j7 4h feBs* + *6s4 + 4- £64* 4- ^47 
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0*53 = fc4 44 4- fc5-^ 4- fe& i ft -r- ^24 + + fc&4? 4* + *£i * 4- fc6u 4- 
Mia + &$a4 + ^635 + fcSss + Af$4s 4- &64T 4- ^6*8 

0x79 m fc4 45 4- £4*8 4- Jc4 4 r 4- fcSw + *5» + fc5ac 4- *5;zt 4- J&41 4* fcfiis + 
±6is + *6 1<5 4- *Gyr + + ^aa + 4- fc^ar 4- 

OxeitS = A?44G 4- H17 + + *5u + *5u 4- ^3 + 4- fcSia + ^43 + 
k&a 4- fc6ia 4- AGi* + JbGjT ■+* «^is + 4- fcG 32 4* fcGbc + *$st 4* 4- 

Ox/6 — i5i4 7 4- fc4.ia + &3tt + *£t* 4- fe&w 4- iS^g 4- k$ u 4- £644 + ^12 + 
Wtt4- fata + fc6is + + + fc6*r 4- *6»4- fcSu + 

Oxba ~ ktw ± ko n 4- fc5is 4 *5i4 + Atfag+A^i 4- *fca 4- kBti +i6i3 + 
*6x4 + Mh& 4- H^t + feCw + *6m +■ *6» + &6« + 

0*04 = JfeSu + J5u 4- k5i 5 4- fc544 + + *5<a 4- &11 + Jfedw + *6is4« 
fc6*i * Mm + ^635 + WUt 4- &644 + *6*5 4 *64* 4- *7ia + JhTaai 

0*25 = *5ia + jk5it + fc5it 4- fe5« 4- fe5*a + 4 4- Js8i 2 4- *6rr + 
Jb8m 4" *6ai 4- &6*r + *Gn 4- fcS 4 i 4- iSc 4- £643 + + Aril* 4- Jb7 u 4* *7*i 

<h£6 - &5i3 + &5 J8 4- fc5 4 a 4- £5*4 4- feS^r + !£» + *6ib 4- fcfca 4- fcGg, +\ 
Jb042 4- fc643 4- k6 M 4- + ft?ift + *r» 

Otc^ = IfcSu + JbSis 4- fc3io 4-*S XT 4- A:5 la 4- fe&4j 4- 4- ^fcS« 4- + 
*6l4 -efc6!5+ Jb6 ls + t0 1T -r W 4- kG^ 4- *6« 4- 4- ^37 4-^ 3a 4- fc^j 
k6 A 2 Hh *644 4- 4- fc7 w 4- .*Tu + 

0^94 — ^5ijs + k&iv + i»i7 4- fcos* +kS*i + *S44 4- fcS« -h ^615 4- *«sc 4- 
Htv 4-Jk6i« +^35 + &6» +«« '+AR« 4-*6« ^4-AtT^ 4- fe7 14 + 
fcTai 4- JbTflj 4- *7» + fcT^i 

Oxo7 = Jb5. u 4« fc3ir 4- 4- fc5 4 i «f 4* ^45 4- ftS«i + fc6i 7 + kQi* 4» 

fe6au 4- 3fe%7 + J«l3S + 1^4-^042 4- ^ ^«!45 + JbTl4 4-fc722 4-fc7 W 4.fc732 

tec/ = JbSrr 4- + &4<t + 4 + ^ 4- + ^637 + W» + 

M«i 4- *6 4 * + 4~ k&4 B +kl n Hr &7 ai 4- fe7^ 4- Jb7» 
Oxe7 = + ib5 tt 4- ^43 4- 4- *&it 4- fefci* 4- fcSas 4- Jb8« 4- *6« 4- 

A6 43 4-Jc644 4-l^r + l^ia4-^2t v 4-^»4'fc7a4.+ ^^ - 
0x69 = k5zi 4- A^3i + Jto4t +^43 4**54i4- *«4i 4-*644+fc722 +^7ai 

Qxca = fc5M ^ fc5:*5 4- fc5< 2 4- ^5 44 + kQn + -r ^7^ + k7ss 
toSl — AS** + ^33 4- Aou 4- 4-ifc64i + ft643 4- *7 2J 4-fc7M4-fc7 3 i 4-^34 
0x5c = fc5« 4- JfeSs4 + *5*2 4- 4- *6i» 4- *S« 4- *7ai 4* *7si 
0x33 ^ fcS^s + ItS^ 4- te&44 4» fc5 4 » 4- k&42 4- ^643 4- k844 ^ + 

k7xs + fcTjt 4- JkTja -4- fc7» fe7sv 4« *7s2 

0^48 = fr5 2 G 4-^^ + J ^* fc5 «^ Jb ^4-fc643 4- ^644 4- fc04» 4- ^7^! 4 

fe7 i4 + fe7ii 4- fc7» 4- + fe7n + *T te + *7s3 
Dr2S « ^52T + *5st 4 JfeS^i 4- fc54J + ^44 + ^4$ 4- JbS^ + fcftw 4- 4- 

t7ia 4- Ar7« 4- 4- 4- fe7,t 4- *7» + ^34 
(htc7 fcSis 4r 4- feS*! + fc^ + fe5*4 4- k&4r 4- -Hfcftn 4-^42 4- 
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fcfcs* + #H4 + k&i? -i- fcS^B + fcT» 4- kl n + fcTis 4- fcT 24 4- *?3i 4 k?34 

0x09 = fe5*i 4* ^643 + fco*s 4 Tfc6 n + 4 iff** -5- *7 W 4 *7 14 4 
&7 2| 4 AtTm + klm 4 Jb? 2 4 + *7 3 i 4- Jfc7»+ *7 41 

0*16 = Jfe5 42 4 *5 4 3 4 ^544 -f *6,2 4 A643 4 ^643 4 &7i4 + 4 **» Hh 
A:7 W 4 kin 4 i7a3 4- feT« 

0x4s = Jb&43 4 *$44 4 *6 1 J 4 *&« + A^Ms + fc6<u 4 fc7 u 4 *7«a 4- Jb7« 4- 
*7 3 i 4 k7s3 4 *7$4 4- ^43 

Oacic ~ fc54 4 + fc6ii 4- *6, 4 4 *&« 4 fc6t4 + 4- + *7aa 4 &7 34 4 
*74l4*7 44 

+ *7i2 + *7i3 4 *7i4 4 *7aa 4 *7 M 4 ^34 4- *7 4 * 4 *743 + fe7«* + £7^ 

0*43 = *6' M + A&ta + *6u + *Gi2 + *6ia 4- J&u 4 4- *fiti 4 A643 4 
A643 + fc044 + *«45 4 *$4S 4 k?i i + W13 4- *7ia + fc7 M + *7ai + kin 4 fc7aa 4 
*?34 + 4 *7f4 Hh *743 4 &744 + &7 4 o 

&r7<£ = fe5 47 + *6 U -4 fcfti* + fe6 14 + IcGi* 4- fe6|« 4 fa&ir V*&41 4 £643 4 
fcg^-h fa6«r 4-tfu 4&7 4 3+ ktu 4 &7 24 + *7« 4*7» 4 W41 + **4a +»«+ 
A?74*+*74s4lf747 

Oir57 » *64A + *6i 1 + &6 U 4 A615 4 *St* -h ^43 4- fc6 44 4 £643 + % + 
*7i 4 4 &7 ZI 4 k7 ti 4 *7» 4 hi** 4 &7» 4 *7js 4 kltx 4 ^744 4 *7 4s 4- fc7 41 

0«37 = M u + 4 fe6 M 4 ^632 4 + fc7 l5 4 Jfe7 2a 4 fe7» 4 Ar7 w 4 
*74l 4 «r7 4 4 

CU;94 = A^ii 4 fc6\ 4 -4 fefi^a 4* ^633 4 fcS^a 4 4- fc6«i -f- ^643 4 JtTm 4 
JfcTu 4 &7, v 4- h7<n + IrTai 4 ^732 + fe7« + jfct-u 

Or51 m 4- 4 Jfefci =+ A:64i *r Jfc7« 4 fc7 41 4 Ir7a4 4- £7*4 + *743 

0x5e = *6 14 4- ^ 4- *£» 4 A^ 4 4 AOaa -h&fe* 4 ^634 4 &6« 4 *6« + 
^644 4 *7« + i7i3 4 4 *7n 4- Ir7ai 4 ^32 4 ftfa 4 fc7 M 4 Ir7»4 

OrfS = ia6, 6 4 *G 1* + fc6 lT + W w + ^22 4 ^4 4 + fc6bi 4 *6s4 + 

1^ 4" ^641 4 <:7lL + ^72l4rfe74S.4 ^746 4^747 + ^748 _ 

Q^48 » *6i 6 4&6i T +fe6i« 4 kSzi + ifta 4- 4- Ic^t 4 fctbs 4 l^s Hh 
W42 4 kT lt 4 &722 4 *?46 4" »4T Hh 

0x28 = «6i7 4 i^is -4 .I** 4 Ictbat 4- 4 *6a7 4 W31 4 fcfe 4 1*34 4 
*6ar 4- *643 ^4 W13 4- *7aa 4 *s7 4T 4 fefe 

s 4* fcBai 4- ^622 4- ^623 4 fc©2ft4- 4 fc^3i 4* ^32 4 ^633 4 
fe6 5 s 4 Ar6a» + fc6 4 i 4* £644 -h W11 4 *7t 4 4 Jt7 21 + ^7^ + fc748 

Osp/7 = fcGsi 4- ^625 4 feCst 4 + ^€41 4- fc7 u 4 Ik722 + *7a* 4 kt n 4 
fe7aa 4- ^734 4 £743 4 k$ts 4- jfe&zs 

Ox^e * A622 4 JbSjs 4- i634 4 4 k&tr h kBss 4 + A3633 4 &6j4 4- 
^ 3c 4- fc6or 4 k&sn 4 *6 43 4- M43 4- «44 4-*7ia+ *7u 4 fc7i 4 4 4 fc7 2 3 4 
*7„ + *7« * *7^ + £7444 W*4 4- *%4 
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<fce52 - fc6^ 4- *62i 4- fce*r 4- His + *«33 + *^ 4 *$37 4- fc&sa 4- *&« +• 
kBu 4- Jb7 i3 + *7u 4- *722 -I- &73J + *7s 3 + *734 4- fc7 4 i 4- *8n 4- -feSji 

Or/a « At6q4 -f 4- kBu 4- + £644 4- fc?u 4- 4- fc7» -h t7 ft4 4- 
*7 31 + Jc7 S3 + *7 4 2 + *S,* + £822 

te/$ = *6 75 4'J&37+^B4^54l^4-J^ 
Ar7u + *7 14 4- fc722 4 fcta 4- A*** 4- &7 31 + ft7aa 4- *7 4i 4» k?42 + *?*s 4- k7u> + 
ik746+*Sit+i^8ii + ^8i3 + feSM +*8 t « 4*Sai 4 Jb8ga 4- &S23 + £834 4- 

0*60 = fct>2fi + feSar 4- Wa* 4- ^637 4- £641 4- fcfcoa 4- k7u + *7, 3 -r fc?2i 4- 

*723 H- *7ffl| 4-*7*4 4 fc7» + *7 3 4 4- &?4| + &7 4 * + *7 4 * + *T«5 + kZ u 4- fc8i* + 

J&ia -5- fc&tft 4- *8 ai 4- fcS^a 4- *8» * £825 

Oxrf - I&2r4-&5a34-Jk6»4^3s4-*6^ 
W44'+'Jb74a 4* A7 4 7 4- 4 fcgu 4- fcSis 4- fcSit 4- fcSaa 4- A824 4- £825 4- ASar 

OxcQ = J^34+Jfc6 aft +i«4a4-A7iai4-A722+A723 4-A7»+fe7 4 i + &7 4 24*7 4 &4- 
W«a 4-*7«4-*$u + ^8 12 + *8 w + *8 4-fc8 w 4- fc8a.+ JS22 + Wis -h*Ssas+/c825 

Q*2c; a fi$4t4-*6 4 a^fc7ii4-fc7 13 4'&7 n 4-^ 
fc74J 4-ik743*f Arxi+^^S-f + fc8 ia +Mt44-fc8js4-i^4-J^+A*825+^t 

to/5 = fcO^a 4- 4h fcG 44 fc7ia 4- *7j$ + *7i 4 -I- fc7« 4* A:7 34 + k7aa 4- 
*7 4 i 4- *74z + &7 43 + ^745 4- k?m 4- *8n + &&12 + fcS u 4- + *8m 4- tSaa + 

0*08 = Mb* 4- ^644 + fc7 w 4 fc7i4 + &724 4- *7» 4 *7 4 i + fc7« 4- k 7« 4- 
Jfc744 + A74S-+ *?47 4- JbB u + ifc8, 2 -h*»ia 4- fcSi 4 4- kSt* 4-*8i7 -h^Ssi 4 £824 + 
ASjbg 4* k8t? 4^ fcBstx 4- itfi 53 

Oxc9 = Mm 4- ib7u + k7n 4 fc7 3 i 4~ &7s t + *74i + + 1:7*4 4- i^T^ 4- 
fc7 4T 4 ^7 tf 4- kS» -r ^8j 4 4 ItSis 4- fcSir 4- feS^ 4- fcBn -He8» + fcSst + 

.fcSaT -h ^84* 4- fe^uj 4> /c8$3 + ^834 

ttxod = ^45 HK fc7i3 + *7» + ^72a 4- fe7 M 4- &7*4 + *723 4- kTn 4 fc7« 4- 
At7^3 4- Jfe734 4 A74i -h 4:7^ Hh A:745 4- *»u + ft&u + fc8xa 4- ^822 + + ^20 + 
kSvt + 4- + *8n3 

Oar/rf as *64» + *7i«4- fc722-4- fc723 4- *7*4 4-.*T2$ 4- *73a 4-.i:7s3 * ^34 4- 
k74£ 4- ^7*5 +*7 4T 4 Jt8i2 4 ^»+&Si7 4- feS^i 4- fc8» ^Hn 4- *8»+ t^r-h 
Jfc8»t 4- fc8» + JaSa 4- fc8»4 

Ox«l = 1:647 4- JfeTtr 4- fcTaa 4- kl^t 4- *72r 4* *7i3 + *734 + ^7o + Js7« 4- 
Jt74« 4- 4- ftSia + fc»i& 4- &8is 4 fefiia 4- kS** 4- fe8« 4- JfeSzs 4- fe^ 4- fcfian 4- 
*83a4-fea»4'fc8:M 

0xe9 « fe648 4- *7ia 4" *7» 4- ^7^ 4- fcfo + + *7at 4 kTn 4- ^33 4- 
^7« 4- ^745 + *7 4 t 4- k74* 4- AS 14 + JfeSis + fc8 u 4- fc8i* 4- fe8« + *$2* 4- 1^25 4- 
i^xr 4- feds* 4- ^831 4- £853 4- ^834 

(fcrflu = Jfe7ii 4- fc7a3 4- ifc724 + Wa* -f-jk7 M 4 ^7^ + *7 44 4- fcSia 4- J8.14 4^ 
ifefea 4- feSsa 4- fcSaa 4- fc834 4- fe8 4 i 
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CfecOrf m kJlt 4 kl& + + £7*4. + *Sl4 + fcfe* 4" fe»33 + A$34 + 

O*e0 a* fc7,a -h &7 2 i 4- *7 3 i + *7 4 i 4- *8n + £821 4- A:8« 1- + *842 

0xo4 ~ *7, 4 + k7t2 4- 3b7aa -5- fc7« + &7 32 4- + fc?** + *74* 4- 4 
£7 4 4 4- &8t3 4* *8l* + *8l4 4- ^21 4- *8*1 + **3* + *&33 4- *8s* + £84* 

0*8e =5 fc7is + fc7 a i + Jb7-» 4- fc7 3l + Jfc7 32 + *7«2 4- kf^ 4- £744 + ^45 4- 
A#n + &8ia 4* + ibfi^s -h^S^i + £823 4- &8fcf 4* ^Sz5 4- £831 + ££32 4- &S44 

Qxcfo - fr7,* + jfe7Ti 4 Atfaa 4- *7 3 a -f &7 33 + fc7« + *744 + *7 4 « -I- *8i 3 4- 
J3t4 + 4- &8» + M a4 + *8as + fc8*» 4- Jb8» + **ab 

0x58 = k7 l7 + *7 3 i .4- k7*t + *7m 4- k7 3 1 4 A7 M 4- k7** + *7*4 4- *7 47 4- 
fc8i4 * 4- fc$*i 4* *&» 4- £&27 4- fc&u 4- fcSa* 4- kSj* 4- k8*7 

D»2e fc7 l6 +*7 2 i+*724 4-*7ai +*7344- fc7 4 i 4 &741 4-*74a4-*744 4 Jb7*» 4- 
*8*i 4- fc8« + *8 M 4* tSi4 + fcSis 4- ^823 4 £823 + 4- *8ai + £834 + *8« 

0*91 - *7 3l + *7 2 4 4- fc7u 4- fc7 3 4 4- *?4l + *T4a 4- *743 + «44 f- fe8u + 
«» 4- Jc8ia H- fc8i4 4- fcSia 4- jfcS,^ 4- fc8s« + it83i + 4- H*t 

Otr68 « ft7 23 4- fc7 M -h ii732 4- If7a4 4- fe?4i 4- k8 u + *8*s 4- ^825 4- fcSar + 
A$5i 4- 1^3^ 4- ^838 4* ^2837 

te 1/ ^ JtTao + fe7aa + fc7 4 i -r fe7« -h fe7« 4- fc8 u 4- ^812 4- frBia 4- k&a -|- 
1:823 + k8 Z 4 4- fcSas 4- fcS 3 j 4- 4^54 4- icfl^s 

0*&b = it7 2 4 4- fc7^ 4- *74* 4- &744 4- kS t * 4- + fc8»i + 4- 4- 
^8ati + kSn + &82« 4- *S« 4 &8w 4- Mbr + feSw 

&ce6 = &7 9 4 *7as + ^T^s 4- *74« 4- fcTir + ^7^ 4- jfcSis 4- fcSis 4-^tr 4- 
fcSia 4- k$2i 4- fcSas 4- JfcSas + *8»r 4- 4- ^833 4- *8a« 4- *8sg 

QxSd « Jfe7 25 + fc73Q -f *74* 4- Jfe7 4 7 4- klu + feSia 4- ^817 4- 4^ A:^, + 
&8aa 4- JbS^ 4-Jfe8» 4*&8aa +*Sfl*4-lr8«i + ^855 + ^854 + *S»4-I^a7 

0x77 ^ Jt7 2r 4* *7 ST 4^ 4^47 4- tfiiT 4- fc8 u +" 4- ifcSai 4- fcS^ + 

fcS^s 4- fcB 2 T + tfb* 4 4- 4- k&ai 4 fcSas 

Oa:42 « Ar72* 4- *7 3 » + *74s 4 *74b 4- k7*t 4- AS* 4- *8is 4 ^Sir 4 ^821 4- 
^822 4- fcSae + fc8^8 4 ^851 4- fe8aa 4- 1^895 4-,lf8 3 j 4- ^835 

Cbc78 - fc7 4 * 4- *745 4- *74« + *7<b 4- ^812 4- fe8w 4- *8ia 4- fcSu 4 feBza + 
^824 4 *83* 4-&83I 4-&S33 4- fcSw -hfc8 33 4-fc32a4-i8 4 i + fc^ii 

0x85 = ft742 +*T« + ib74s 4- ifc747 4h *8«+ fc8is 4- JbSia 4- fc8i 7 4- fcSn 4- 
fc823 4- *827 + ^fcSai 4- k8xt + fc8» + *8^ + fe83$ + £84* 4- *<hi 4- 

Orl6 = 67*3 4- &7« + ^ 4-fe7 4 7 4- &7«+ *8i» + *?8is + feSi« 4 fc8*7 4- 
fc^a +*S*i 4h kStj + fcS24 + A«25 4- ASa» 4 4-fc832 Hhifcfe, + ArS 34 + fc«36 + 
fc8^ 4- £843 + fc9 u 4- k9j3 

0x24 = ^44 4- Jfc7 45 + A7 4T 4- fc8i 4 4- ^15+ AS 1T + itSzt 4- ^823 4 **** + 
Afes + >8si + fcSs* 4 ^37 4- fc&« 4- A^i^ 4- ^4 

0x7c = Jt74 5 +^474- Jt74it4-A5i 8 4-*8i74-Jb8i» + fc82i +^ 
*S27 +^82» +*8» 4-fe8ba 4>fc8»4*a«4-Afi4« 4 fe9i 3 »h*§ l6 + *:953 4 A<>2s 
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0x42 - kT^ + fc7 4T -I- *8i* + **i T 4 *8*t + k&2* 4- 4- k&*s 4- £827 + 
fcSsi 4- frS S4 t fc8 35 + *a«3 4- kS^ + JbS^ + fc9is 4- *9 22 4- fe9» 
OxSd = *7 47 -I- 4- *S*r + **i8 4 4- £833 4- *8*3 + *8 24 + 4- 

A#47 + 4- fe9 l4 4- 4- A9it 4- J&ai 4- *9m 4- 3fc9« 4- fcSs* 4- 

0r56 =5 *7«i 4* *8m4- fcSsa + frSyj + ^824 + *8as 4- fc8s e 4- k&n 4- Jfe&ja 4- 
^834 4-4*35 + 4- *8-« 4- &3*i + fc&a + 4- 1:845 + *8 4 6 4- ^84* 4- *9n 4- 
*$12 4- A$i3 + fc9i3 4- &>j«4- 4~ &02i 4- fc9n + fc&3 4- fc9i$ + fc9» 4- *S2s 

Here, the following equation holds true, 
[formula 40] 

rank(M*KH) = N m - N r 

Thus, the above 168 linear-relation equations are 
linear-relation equations independent of each other. It 
is therefore obvious that (2 168 - 1) linear-relation 
equations obtained from linear concatenation of any of 
the 168 equations on the GF(2) hold true. If the number 
of such linear-relation equations is large, it is feared 
that a new attack that the designer of the encryption 
method is not aware of is brought about. For this reason, 
the total number of linear-relation equations obtained by 
adoption of the method described above can be used as an 
indicator for the evaluation of the encryption level . 

The present invention has been described in detail 
by referring to the specific embodiments. It is obvious, 
however, that a person skilled in the art is capable of 
correcting and modifying the embodiments within a range 
not deviating from the principle of the present invention. 
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That is to say, the embodiments are explained only for 
the purpose of disclosing the present invention and not 
to be interpreted as limitations imposed on the present 
invention. The scope of the present invention should thus 
be determined by referring to claims appended at the end 
of this specification. 

It is to be noted that the series of processes 
explained in this specification can be carried out by 
using hardware, software or a combination of hardware and 
software. In the case of software used as an execution 
means, a program prescribing the series of processes is 
executed. The program is installed in advance in a memory 
employed in a computer including embedded special 
hardware or a general-purpose computer capable or 
carrying out various kinds of processing. Typically, the 
program is recorded in advance in a recording medium 
embedded in the computer. Examples of the embedded 
recording medium are a hard disc or a ROM (Read Only 
Memory) . 

As an alternative, the program is stored (or 
recorded) in advance in a removable recording medium 
temporarily of permanently. Examples of the removable 
recording medium are a flexible disc, a CD-ROM (Compact 
Disc Read Only Memory) , an MO (Magneto-optical) disc, a 
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DVD (Digital Versatile Disc) , a magnetic disc and a 
semiconductor memory. Then, the program recorded on the 
removable recording medium is presented to the user as 
the so-called package software. The program is then 
installed in the computer from the removable recording 
medium described above. 

It is to be noted, however, that the program can 
also be downloaded to the computer from a download site 
by a wireless communication or by a wire communication 
through a network instead of being presented to the user 
by using a removable recording medium. Examples of the 
network are a LAN (Local Area Network) and the Internet. 
The computer includes functions to receive the downloaded 
program and install the received program in the embedded 
recording medium such as a hard disc. 

It is to be noted that the various kinds of 
processing described in this specification can be carried 
out not only seguentially in accordance with a 
predetermined sequence but also concurrently or 
individually in accordance with the processing capacity 
of the apparatus for performing the processing or in 
accordance with the necessity. 

As described above, in accordance with the 
configuration of the present invention, it is possible to 
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comprehend all equations expressing linear relations 
among round keys in the common-key block encryption 
method without regard to the complexity of key scheduling 
and possible to evaluate the encryption level of the 
common-key block encryption method on the basis of the 
derived equations expressing linear relations among round 
keys . 

In addition, in accordance with the configuration 
of the present invention, the key-scheduling part 
algorithm, which is one of encryption algorithms, is 
expressed in terms of equations represented by vectors 
and a matrix and, then, non-linear transformation output 
values and initial values are eliminated from the 
matricial equation by carrying out a unitary 
transformation process in order to find all equations 
expressing linear relations among round keys. If the 
relations among the round keys are simple dependence 
relations, the number of true round keys decreases. Thus, 
the designer of the encryption method needs to use 
caution so as to prevent a large number of such relation 
equations from existing. In accordance with the method 
provided by the present invention, the level of 
encryption keys is evaluated for the purpose of reducing 
the number of equations expressing linear relations among 



round keys. As a result, a safer encryption method can be 
designed. 
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